Privacy notice · Taarifa ya faragha
Your questions stay yours.
Uliza is designed so that we never need to know who you are. This notice explains what is stored, why, and your rights under Tanzania's Personal Data Protection Act, 2022.
What we never collect
Your name, phone number, student ID, exact location or photos. On WhatsApp your number is converted into a one-way code on arrival; the number itself is kept only in temporary memory for WhatsApp's 24-hour reply window and is never written to our database.
What we store
A random reference (for example #K7QX4A), your language, the age, sex and institution you choose to tell us, your conversation, screening answers, referral codes and survey ratings. This lets the service work and lets clinics confirm your visit with a code instead of your name.
Who sees what
MDH programme staff see totals and de-identified tables — never your messages linked to you. Facility staff see only the service, your age band and sex when you show a code. A trained counsellor sees a conversation only if you ask for human support.
Security
Encrypted connections (HTTPS) only; a PostgreSQL database that is not reachable from the internet; role-based staff access; an audit log of every staff export, approval and change; and daily backups kept for 30 days. Data is hosted with providers that meet international security standards, and the AI provider is contractually barred from training on your messages.
How long
Conversations are kept for the project period plus three months (to 30 September 2027) for safety review and quality checks, then deleted automatically. De-identified totals may be kept for programme reporting.
Your rights
You can stop at any time, start a fresh anonymous chat, or permanently delete everything with Delete my data in the chat. Questions or complaints: privacy@xakin-ai.com. You may also contact the Personal Data Protection Commission (PDPC).