Draft — this text is not final and will be reviewed by a lawyer before launch.
Privacy policy
Updated:
Short answer
Harusi Pass collects the minimum needed to send invitations, receive replies and contributions, and admit guests at the gate. We do not sell data or use advertising. A host can download or delete guest data, and a guest can ask for a copy or for erasure.
Who we are and who controls the data
Harusi Pass operates in Tanzania and follows the Personal Data Protection Act, 2022. For guest information, the event host decides who is invited and why, so the host is the controller of that data and we process it on their behalf. For host and committee account information, we are the controller.
Company registration details and address will be added here before launch.
What we collect
| From | Information |
|---|---|
| Host and committee | Name, phone number, role in the event, records of important actions (such as recording a payment) |
| Guests (entered by the host) | Name, phone number (if any), group, number of people allowed, language, host notes |
| A guest using their card | Reply, party size, request to stop reminders, pledges and payments (amount, provider, payment phone number) |
| At the gate | Card scans: time, gate, result, and who admitted manually |
| Messages | Status of the WhatsApp or SMS sent (sent, delivered, failed) |
How we use it
- To send cards and reminders and show status to the committee.
- To receive and record contributions and payments.
- To confirm entry at the gate and prevent a card being used twice.
- To prevent misuse and protect the service.
- To meet legal obligations.
The legal basis for each use (consent, contract, legitimate interest or legal obligation) will be confirmed by a lawyer before launch.
We do not sell or share data with advertisers.
Providers we use
To send cards and confirm payments we use: WhatsApp and SMS messaging companies, a mobile payment provider, and servers that store data. They receive only what is needed for that job and may not use it for anything else.
Where servers are located and any transfer of data outside Tanzania will be described here before launch.
How long we keep it
Event data stays until the host deletes it or asks us to. When we receive a request to delete an account, we delete the account and its events within 30 days. When a guest is erased, their name, phone and notes are removed; the payment amount stays without personal details, for the event’s accounts.
A maximum retention period after an event ends will be set by a lawyer.
What is stored on your device
Your card keeps a copy in the browser so it shows offline, and your reply until it is sent. The gate app stores the guest list on the agent’s phone; the gate PIN is not stored. More detail is on the cookies page.
Security
Card links are unique and cannot be guessed; we store hashed forms for verification, plus an encrypted copy needed to resend the link. The keys used to sign QR codes are encrypted on the server. We never ask guests for a password, PIN or secret number. No system is risk-free; if we find a breach we will tell those affected and the authority as the law requires.
Your rights
- To know what we hold about you and get a copy.
- To correct inaccurate information.
- To ask for deletion and object to certain uses.
- To stop reminders from your card.
- To complain to Tanzania’s data protection authority [a lawyer to confirm the authority’s name and address].
How to ask is on the data requests page.
Children
The service is for adult hosts. We do not target children, and hosts are responsible for the information of the guests they add, including children.
Changes to this policy
If we change this policy we will update the date at the top and, for significant changes, tell hosts.
Contact
Privacy questions: [email protected].