Privacy Policy

1. Who we are

MDOE TURNING POINT (“MTP”, “we”) is a company that rents rooms and shops in Dodoma, Pwani and Dar es Salaam, Tanzania. We decide what information is collected and how it is used — in legal terms, we are the “data controller”.

2. Information we collect

What we collect depends on who you are:

• If you apply for a room on the website: your full name, phone number, WhatsApp number, NIDA number, occupation, and the contract length and start date you want.
• If you are a tenant: all of the above, plus your nationality, email, photo, a copy of your ID document, the name and phone number of your next of kin and an emergency contact, your preferred language and contact channel, your contract, charges, payments and receipts, and the messages we send you (SMS, WhatsApp, email or in-app).
• If you are staff (manager, accountant, administrator): your name, email, phone number and role, plus a record of what you do in the system — who changed what and when, your IP address, device type and app version.
• Through the mobile app: a sign-in token (kept in the phone's secure storage), your device name, operating system and app version, so we can recognise your device and send you notifications. Anything you do without a connection is stored on your phone until it can be sent.
• Camera and photos: the app opens your camera or photos only when you choose to attach a picture (for example, an expense receipt). We cannot see any other picture.
• Fingerprint: the app uses your phone's own fingerprint check to unlock the app. The fingerprint itself never leaves your phone and we never receive it.

3. Why we use it

We do not use your information to advertise other companies' products, and we do not sell it to anyone.

• To review room applications and prepare tenancy contracts.
• To manage contracts, collect rent and charges, and issue a receipt for every payment.
• To send you payment and contract-expiry reminders, and important notices about your building.
• To keep the system secure and detect misuse, using the activity record.
• To meet our legal and accounting obligations.

4. Who can see it

Inside MTP, access depends on role. A property manager sees only the properties assigned to them; an accountant records payments but cannot decide tenancies; only the main administrator sees everything. A tenant sees only their own information.

We use outside service providers for specific jobs only: SMS and WhatsApp providers (currently Beem and MoSmS) receive the phone number and the text of messages we send you; the email provider receives your email address and the message; and the company that hosts our servers. They may use that information only to provide that service.

We may disclose information to government authorities where the law requires us to.

Our website shows illustrative photos from Unsplash; your browser contacts Unsplash to download them, so Unsplash can see your IP address. We run no advertising, analytics or tracking tools on the website or in the app.

5. How we protect it

• All traffic between your browser or app and our server uses HTTPS.
• Passwords are stored as one-way hashes — nobody can read them, including us.
• A tenant's first password must be changed before anything else can be used.
• The app's sign-in token is kept in the phone's secure storage, and a token the server rejects signs you out of the app immediately.
• No system is perfectly secure. If you notice anything unusual on your account, tell us straight away.

6. How long we keep it

We keep your information for the length of the tenancy and for as long afterwards as accounting, tax and legal obligations require, or to resolve any dispute. After that we delete it or make it unidentifiable where the law allows.

7. Your rights

Under Tanzania's Personal Data Protection Act, 2022, you have the right to:

• know what information we hold about you and get a copy;
• ask for inaccurate information to be corrected;
• ask for information to be deleted where we have no legal reason to keep it;
• object to certain uses of your information.

8. Children

Our services are for adults who can enter a tenancy contract. We do not knowingly collect information about children under 18.

9. Changes to this policy

If we change this policy we will publish the new version here and change the “Last updated” date above.