1Information We Collect
We collect information you provide directly, information generated by your use of the Services, and information collected automatically by your device, in order to process loan and insurance applications and operate the app safely.
| Category | Examples | Why we collect it |
|---|---|---|
| Identity data | Full name, date of birth, gender, NIDA national ID number, photo/selfie for verification | Identity verification (KYC), fraud prevention, regulatory compliance |
| Contact data | Phone number, email address, physical/residential address | Account creation, communication, service delivery |
| Financial data | Mobile money account details (M-Pesa, Tigo Pesa, Airtel Money), loan amount, repayment history, insurance premium and claim details | Processing loans/insurance, disbursing and collecting funds, credit assessment |
| Farm & agricultural data | Farm/plot location and boundary (GPS coordinates), acreage, soil type, elevation, crop or livestock type | Underwriting insurance cover, assessing loan collateral, verifying and processing claims |
| Documents & media | National ID scans, land/collateral documents, photos of crops, livestock, or property uploaded via camera or file picker | Application review, KYC, claims assessment |
| Device & usage data | Device model, operating system, IP address, app version, crash logs, pages/screens visited | App functionality, security, diagnosing bugs, improving the Services |
| Communications | Messages sent via our contact form, WhatsApp, phone, or email support | Customer support, dispute resolution |
We only collect data that is reasonably necessary to provide loan and insurance services. We do not knowingly collect more personal data than required for these purposes ("data minimisation").
2Android App Permissions
In line with Google Play's Data Safety requirements, the MkopoBima Shambani Android app requests the following device permissions. We only request what is necessary to deliver the features below, and each permission can be reviewed or revoked at any time in your device's Settings → Apps → MkopoBima Shambani → Permissions.
Precise Location
Used only when you choose to map your farm boundary or auto-fill your farm's GPS coordinates during an application. Not collected in the background.
Camera
Used to capture ID documents, farm/collateral photos, or a verification selfie during onboarding and claims submission.
Photos / Storage
Used to let you attach existing photos or documents (JPG, PNG, PDF, DOC/DOCX) from your device to a loan or insurance application.
Internet & Network State
Required for the app to communicate with our servers, submit applications, and sync your account.
Notifications
Used to alert you about application status, approval, disbursement, and claim updates.
Phone (optional)
Used only if you tap a "Call Support" button to dial our helpline directly from the app.
We never collect precise location in the background, and we never sell location, camera, or storage data collected under these permissions to third parties.
3How We Use Your Information
- Create and manage your account on the app, website, and Platform Portal.
- Verify your identity (KYC) using your NIDA number and submitted documents, as required by Tanzanian financial regulations.
- Process, underwrite, and disburse agricultural loans, and administer crop/livestock insurance policies and claims.
- Assess farm and collateral data to determine loan eligibility, loan limits, and insurance premiums.
- Facilitate fund disbursement and repayment collection via mobile money partners.
- Communicate with you about your application, account status, payment reminders, and support requests via SMS, WhatsApp, email, or push notification.
- Detect, investigate, and prevent fraud, abuse, and security incidents.
- Comply with legal and regulatory obligations, including reporting to TIRA, BoT, BRELA, and other competent Tanzanian authorities.
- Analyse aggregated, de-identified usage data to improve app performance, features, and customer experience.
4Legal Basis for Processing
We process your personal data on one or more of the following legal bases:
- Consent — where you have given clear consent, e.g. during account registration and before we access location, camera, or storage permissions.
- Contractual necessity — to perform the loan or insurance contract you enter into with us or our lending/insurance partners.
- Legal obligation — to comply with KYC, anti-money-laundering, tax, and insurance/lending regulations in Tanzania.
- Legitimate interest — to keep our Services secure, prevent fraud, and improve our products, in a way that does not override your fundamental rights.
6Third-Party Services
Our app and website rely on the following third-party services, which may process limited technical data (such as IP address or map tile requests) under their own privacy policies:
- Google Play Services — app distribution, updates, and standard Android platform services.
- Mapping & elevation services (e.g. OpenStreetMap/Leaflet, Open-Elevation) — used only to render the farm boundary map and estimate elevation for the plot you choose to map; no data is shared beyond the coordinates you submit.
- Mobile money APIs — M-Pesa, Tigo Pesa, and Airtel Money integrations used strictly to disburse and collect funds.
- Email & messaging providers — used to deliver transactional emails, SMS, and WhatsApp messages related to your account.
7Data Storage & Security
We implement administrative, technical, and physical safeguards designed to protect your personal information, including:
- Encryption of data in transit using HTTPS/TLS.
- Access controls that limit staff access to personal data on a need-to-know basis.
- Secure session handling (HTTP-only, SameSite cookies) on the website and Platform Portal.
- Regular review of our systems for vulnerabilities.
No method of transmission or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security. If we become aware of a data breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.
8Data Retention
We retain your personal data for as long as your account is active, for the duration of any loan or insurance policy, and thereafter for as long as necessary to comply with our legal, accounting, dispute-resolution, and regulatory record-keeping obligations under Tanzanian law (including KYC/AML record retention requirements). When data is no longer required, we securely delete or anonymise it.
9Your Privacy Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete personal data.
- Withdraw consent for optional processing (e.g. location access) at any time, without affecting processing already carried out.
- Request deletion of your personal data, subject to our legal and regulatory retention obligations (see Section 10).
- Object to or restrict certain processing of your personal data.
- Request a copy of your data in a portable format.
To exercise any of these rights, contact us using the details in the Contact Us section below. We will respond within a reasonable time and may need to verify your identity before actioning your request.
10Account & Data Deletion
You may request deletion of your MkopoBima Shambani account and associated personal data at any time by:
- Emailing info@mkopobima.co.tz with the subject line "Account Deletion Request", from the email or phone number linked to your account; or
- Sending a WhatsApp or phone request to +255 67 909 6027; or
- Using the account deletion option inside the app (Settings → Account → Delete Account), where available.
We will delete or anonymise your personal data within a reasonable period after verifying your request, except for information we are legally required to retain — such as records tied to an active or unresolved loan, insurance claim, or KYC/AML obligation.
11Cookies & Tracking Technologies
Our website uses a limited number of cookies:
- Essential/session cookies (e.g. PHPSESSID) to keep you logged in and secure your session on the website and Platform Portal.
- Preference cookies to remember choices such as cookie consent.
We do not use cookies for third-party advertising. You can control or delete cookies through your browser settings; disabling essential cookies may prevent parts of the website from functioning correctly. The mobile app does not use browser cookies but may use equivalent local device storage for session management.
12Children's Privacy
Our Services are intended for individuals who are at least 18 years old and legally capable of entering into loan and insurance contracts in Tanzania. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a minor without appropriate consent, we will take steps to delete it promptly. If you believe a child has provided us with personal data, please contact us using the details below.
13International Data Transfer
Your information is primarily stored and processed on servers located in, or accessible from, Tanzania. Where we use cloud hosting, mapping, or messaging providers based outside Tanzania, we take reasonable steps to ensure your personal data continues to be protected in accordance with this Privacy Policy and applicable data protection law.
14Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or Google Play policy. The "Last updated" date at the top of this page indicates when this policy was last revised. Material changes will be communicated via the app, website, or email before they take effect. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.
15Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:
MKOPOBIMA SHAMBANI
Tan House Tower, 6th Floor, Victoria Street, Bagamoyo Road, Dar es Salaam, Tanzania