HaflaFund is a record-keeping service for event committees in Tanzania — the groups that organise weddings, send-offs, kitchen parties and similar celebrations. This policy explains what personal information we handle, why, who else sees it, and how to have it removed.
In this policy, “we” means HaflaFund. “A committee” means the customer organising an event. “A guest” means a person a committee has invited or recorded a contribution for.
We do not hold or move contribution money. Contributions are paid into the committee’s own bank or mobile-money accounts. HaflaFund records what was promised, what was received and what was spent. We never take custody of those funds.
Committee owners and members sign in to HaflaFund. For them we store name, email address, phone number, a hashed password, their role on the committee, and a record of actions they take in the system (for example recording a payment or admitting a guest at the door).
Guests do not create HaflaFund accounts. A committee enters guest details in order to invite them and to keep an account of contributions. Those details can include: title and name, phone number, the amount pledged and the amounts received, an invitation card number, and — if the guest attends — the time they were admitted, which door they came through, and how many people were admitted on their card.
Payments received, budget lines, payments made to suppliers (including a supplier’s name and phone number where the committee records one), receipt references, transfers between the committee’s own accounts, and the names and account numbers the committee uses to receive contributions.
When a committee sends an invitation card or a reminder, we store the recipient’s phone number, the message content, the delivery status, and the cost charged to the committee’s message balance.
Standard server logs (IP address, browser or app version, time of request) and error diagnostics used to keep the service working.
We collect guest information from the committee, not from the guest. A committee that enters a person’s name and phone number into HaflaFund is responsible for having a proper basis to do so — usually because that person is a family member, friend or invited guest of the celebration.
We ask every committee to use HaflaFund only for people they genuinely intend to invite, and never for unsolicited marketing. Any committee found sending unsolicited messages is suspended.
We do not sell personal information. We do not use it to build advertising profiles.
We share only what a service needs in order to do its job:
| Service | What it receives | Why |
|---|---|---|
| Meta Platforms (WhatsApp Business Platform) | Guest phone number, and the invitation card content and image | To deliver the invitation on WhatsApp |
| Tchats (tchats.co.tz), Tanzania | Recipient phone number and message text | To deliver SMS inside Tanzania |
| AzamPay | The paying phone number and amount | To process mobile-money top-ups of a committee’s message balance |
| Our hosting provider | Data stored by the service | To run the servers and databases |
| Error-monitoring provider | Technical diagnostics; may incidentally include an identifier | To detect and fix faults |
We also disclose information where the law requires it, or to protect the rights and safety of people using the service.
Invitation cards are delivered through the WhatsApp Business Platform provided by Meta. When a committee sends a card, the guest’s phone number and the card content are passed to Meta so the message can be delivered. Meta’s handling of that data is governed by its own terms and privacy policy.
A guest who does not wish to receive further messages can reply STOP, block the sender, or contact the committee or us directly using the details in section 11.
Step-by-step instructions are on a page of their own: haflafund.tipm.ac.tz/data-deletion.
You may ask us to show you the personal information we hold about you, correct it, or delete it. You may also ask us to stop sending you messages.
To request deletion, contact us using the details in section 11 with:
We respond within 7 days and complete a valid deletion request within 30 days. There is no charge.
If you hold a HaflaFund account, you can also ask for the whole account and its events to be deleted, which removes the guest lists and financial records belonging to those events.
Where a committee — rather than us — decides what is recorded about you, we will pass your request to that committee and support them in acting on it.
Passwords are stored hashed and never in readable form. Access to an event is limited to the committee members the owner has authorised, and each member is given only the permissions their role needs. Traffic between the apps and our servers is encrypted in transit. The usher mobile app keeps a copy of the guest list on the phone so a door still works without a network; that copy is removed when the usher signs out.
No system is perfectly secure. If a breach affects your personal information, we will tell affected people and the relevant authorities without undue delay.
HaflaFund is intended for adults organising and attending events. We do not knowingly create accounts for children under 18. A committee may record a child as a guest of a family celebration; if you believe a child’s information is held inappropriately, contact us and we will remove it.
If we change how we handle personal information, we will update this page and change the date at the top. Significant changes will be notified to account holders inside the application.
Toleo hili la Kiswahili lina maana ile ile na toleo la Kiingereza hapo juu.
HaflaFund ni huduma ya kutunza kumbukumbu kwa kamati za matukio nchini Tanzania — vikundi vinavyoandaa harusi, send-off, kitchen party na sherehe kama hizo. Sera hii inaeleza taarifa binafsi tunazoshughulikia, kwa nini, nani mwingine anaziona, na jinsi ya kuziondoa.
Hatushiki wala hatuhamishi pesa za michango. Michango inaingia kwenye akaunti za benki au simu za kamati yenyewe. HaflaFund inarekodi kilichoahidiwa, kilichopokelewa na kilichotumika. Pesa hizo hazipiti mikononi mwetu.
Wenye akaunti: jina, barua pepe, namba ya simu, neno la siri lililofichwa, wadhifa kwenye kamati, na kumbukumbu ya vitendo wanavyofanya kwenye mfumo.
Wageni waliorekodiwa na kamati: wageni hawajifungulii akaunti. Kamati ndiyo inayoingiza taarifa zao ili kuwaalika na kutunza hesabu ya michango. Taarifa hizo zinaweza kujumuisha jina na cheo, namba ya simu, kiasi alichoahidi na alichotoa, namba ya kadi ya mwaliko, na — akihudhuria — saa aliyoingia, mlango aliopita, na watu wangapi waliingia kwa kadi yake.
Kumbukumbu za fedha: malipo yaliyopokelewa, vipengele vya bajeti, malipo kwa wahudumu (pamoja na jina na simu ya mhudumu pale kamati inapoirekodi), namba za risiti, uhamisho kati ya akaunti za kamati, na majina na namba za akaunti zinazotumika kupokea michango.
Ujumbe tunaotuma kwa niaba ya kamati: namba ya mpokeaji, maandishi ya ujumbe, hali ya utumaji, na gharama iliyokatwa kwenye salio la kamati.
Taarifa za kiufundi: kumbukumbu za seva na taarifa za hitilafu.
Tunapokea taarifa za wageni kutoka kwa kamati, si kutoka kwa mgeni. Kamati inayoingiza jina na namba ya mtu ina wajibu wa kuwa na sababu halali ya kufanya hivyo — kwa kawaida kwa sababu mtu huyo ni ndugu, rafiki au mgeni aliyealikwa. Kamati itakayobainika kutuma ujumbe usioombwa inasimamishwa.
Hatuuzi taarifa binafsi. Hatuzitumii kujenga wasifu wa matangazo.
Tunashirikisha kile tu kinachohitajika: Meta Platforms (kupeleka kadi kwa WhatsApp), Tchats (kupeleka SMS Tanzania), AzamPay (kujaza salio kwa pesa za simu), mtoa huduma wa hosting, na mtoa huduma wa kufuatilia hitilafu. Pia tunatoa taarifa pale sheria inapotulazimu.
Kadi za mwaliko zinapelekwa kupitia WhatsApp Business Platform ya Meta. Namba ya mgeni na maudhui ya kadi hupelekwa Meta ili ujumbe ufike. Matumizi ya Meta ya taarifa hizo yanaongozwa na sera zao wenyewe. Mgeni asiyetaka kupokea ujumbe zaidi anaweza kujibu STOP, kuzuia mtumaji, au kuwasiliana nasi kwa mawasiliano ya sehemu ya 11.
Unaweza kutuomba tukuonyeshe taarifa binafsi tulizonazo kukuhusu, kuzirekebisha, au kuzifuta. Unaweza pia kutuomba tuache kukutumia ujumbe.
Kuomba kufutwa, wasiliana nasi ukitaja namba ya simu au barua pepe ambayo taarifa zimehifadhiwa chini yake, na jina la tukio au kamati kama unalijua. Tunajibu ndani ya siku 7 na kukamilisha ndani ya siku 30. Hakuna malipo.
Maneno ya siri yanahifadhiwa yakiwa yamefichwa. Kufikia tukio kunawekewa mipaka kwa wajumbe aliowaruhusu mmiliki, na kila mmoja anapewa ruhusa zinazohitajika na wadhifa wake tu. Mawasiliano kati ya app na seva zetu yamesimbwa. App ya mhudumu inahifadhi nakala ya orodha ya wageni kwenye simu ili mlango ufanye kazi bila mtandao; nakala hiyo inafutwa mhudumu anapotoka.
HaflaFund imekusudiwa watu wazima. Hatufungui akaunti kwa watoto walio chini ya miaka 18 kwa kujua. Ukiamini taarifa za mtoto zimehifadhiwa isivyostahili, wasiliana nasi na tutaziondoa.
Simu / WhatsApp: +255 712 826 083 · Barua pepe: privacy@haflafund.co.tz