Last updated: 2026-06-16
This Privacy Policy explains how Tumaoni ("Tumaoni", "we", "us") collects, uses, shares, and protects personal data. Tumaoni is a customer-feedback service for businesses in Tanzania, operated by Omojadata. We are committed to handling personal data in accordance with the Personal Data Protection Act, 2022 of the United Republic of Tanzania and its regulations.
There are three kinds of people whose data flows through Tumaoni, and the roles differ:
When a business owner adds an employee, the following may be collected and stored:
Sensitive personal data.A NIDA number and a photograph are sensitive personal data under the Act. We treat them accordingly (see section 4) and only make an employee's record available through the Ajirame service in section 6 after that employee has given their own consent.
NIDA verification (optional).Verifying an employee's identity with NIDA is optional. If the business owner chooses to verify, they submit the employee's NIN and Tumaoni queries Tanzania's national identity service, and the data returned (full name, gender, date of birth) is stored on the employee record. Otherwise the owner simply enters these details by hand. Either way, only the employee's first name, last name, and photograph are shown publicly to customers. The middle name, gender, date of birth, NIDA number, and internal contact are kept for internal/administrative use and are not shown to customers.
Customers do not create an account. Any phone number a customer provides is visible only to the business owner who received the rating, so they can follow up. It is never shown publicly or shared with other businesses.
We process personal data on one or more of these bases under the Personal Data Protection Act, 2022: your consent; the performance of a contract (for example, delivering the service you signed up for); compliance with a legal obligation; and our legitimate interests in operating, securing, and improving the service, provided those interests are not overridden by your rights.
Sensitive personal data.A NIDA number and a photograph are sensitive personal data. Where an owner provides them, they do so on the basis of their authority as the employer and their confirmation that the employee has been informed (see our Terms and Conditions). In addition, before an employee's record is included in the searchable Ajirame employment-history service (section 6), we rely on the prior, specific consent of the employee themselves, obtained directly from the employee rather than only through their employer. An employee may withdraw that consent at any time, after which we de-identify their record as described in sections 6 and 10.
Ratings and comments reflect the personal opinions and experiences of the customers who leave them. They are not statements of fact by Tumaoni, and Tumaoni does not verify them. Business owners can request removal of a specific customer rating from within the app.
Tumaoni is building a related service ("Ajirame") that allows an employee's work-feedback history — customer ratings and owner-written comments, together with a snapshot of the business, branch, and employee at the time each was given — to be searched, including by the employee's National Identification Number, so that prospective employers and others may view that record across the businesses that have used Tumaoni.
Consent is required first.An employee's record is only made available through Ajirame after we have obtained that employee's own consent— for example, through a confirmation message sent to the employee's own phone number. Until that consent is given, the employee's NIDA-linked record is not made searchable in Ajirame. The employer informing the employee is not, by itself, a substitute for this consent.
Withdrawal and erasure. An employee may withdraw consent or request erasure at any time (see section 11). When they do, we de-identify their record: we remove the NIDA number, name, and photograph that link the feedback to that individual, and the record is no longer searchable or attributable to them. We may retain the de-identified, anonymous rating (without any identifier) for statistical and integrity purposes, as permitted by the Act.
Retention of feedback.So that the record stays accurate over time, customer feedback and owner comments — and the related snapshots — are retained even after a business owner deletes an employee, branch, business, or their own account. This retention is always subject to the employee's right to withdraw consent and to request erasure described above; it is not unlimited or irreversible.
We do not sell personal data or share it with advertisers. We share data only with service providers that help us run Tumaoni:
Customer feedback (and the related snapshots) may be made available through the Ajirame employment-history service described in section 6, for employees who have consented. We may also disclose data if required by law, court order, or a lawful request from a competent authority.
We do not keep personal data for longer than is necessary for the purposes for which it was collected.
We use HTTPS for all connections, restrict database access, hash verification codes, and use an anti-bot check on the rating form. No system is perfectly secure, but we take reasonable technical and organisational measures to protect personal data.
If a security breach occurs that affects your personal data, we will notify the Personal Data Protection Commission and, where the Act requires it, the affected data subjects, without undue delay after we become aware of it. Our notice will describe, as far as we can, what happened, the data involved, the likely consequences, and the steps we are taking in response.
Subject to the Personal Data Protection Act, 2022, you have the right to access your personal data, correct it, request its erasure or destruction, object to or restrict certain processing, and withdraw consent at any time.
To exercise any right, email admin@omojadata.org. We will respond within the time required by law.
Some of our service providers (for example, Google, Cloudflare, and ClickPesa) may process data on servers outside Tanzania. Where this happens, we take steps to ensure the data continues to be protected to a standard consistent with Tanzanian law.
Tumaoni is intended for businesses and adults. It is not directed at children under 18, and we do not knowingly collect data from them.
Omojadata's registration as a data controller and processor with the Personal Data Protection Commission of Tanzania is in progress.
We have appointed a Data Protection Officer who is responsible for overseeing our compliance with the Personal Data Protection Act, 2022. You can reach our Data Protection Officer, Hassan Abubakar Manengelo, at admin@omojadata.org.
We may update this Policy. The "Last updated" date at the top reflects the most recent change. Significant changes will be highlighted in the app or on this page.
For any privacy question or to exercise your rights, contact admin@omojadata.org or our Data Protection Officer (section 14). If you believe we have not handled your personal data lawfully, you also have the right to lodge a complaint with the Personal Data Protection Commission of Tanzania.