This Privacy Policy describes how Omojadata ("we", "us", "our") collects, uses, and shares information when you use the Tumadm mobile application (the "App") and the companion fan website at tumadm.omojadata.org (together, the "Service"). By using the Service you agree to this Policy.
1. Who we are
Tumadm is a social-monetisation platform operated by Omojadata. Contact: admin@omojadata.org.
2. Information we collect
Information you give us
- Account data: phone number, display name, age, gender, bio, profile photo.
- Identity verification data (NIDA): creators verify their identity using the Tanzanian National Identification Authority (NIDA) database. We collect your 20-digit National Identification Number (NIN) and, after a successful NIDA check, we store the official name, date of birth, and sex returned by NIDA. We use this information to confirm you are the genuine owner of the NIN, prevent impersonation and fraud on the platform, and meet our anti-money-laundering obligations. Your NIN is never displayed publicly — only the verified name is shown on your profile (alongside a "NIDA verified" badge). We do not sell, share, or transfer your NIN to advertisers or third parties for marketing.
- Social handles: usernames for platforms you choose to connect (Instagram, TikTok, Telegram, WhatsApp, etc.).
- Payment data: Mobile Money number, payout destination. Full card/bank details are never received or stored by us — payments run through regulated processors.
- Content: photos you upload, messages, ratings, and comments.
Information we collect automatically
- Device & usage data: device model, OS version, app version, crash logs, IP address, timestamps.
- Authentication tokens used to keep you signed in.
Information from third parties
- SMS delivery receipts from our SMS partner (NEXT / MJUMBE).
- Payment confirmations from Mobile Money providers.
- Identity verification results from the Tanzanian National Identification Authority (NIDA), used solely to confirm your name, date of birth, sex, and that you are the genuine holder of the NIN you provided.
3. How we use information
- Create and secure your account.
- Display your profile to fans and route payments to you.
- Send OTP codes, rating links, and transactional notifications by SMS.
- Verify your real-world identity via NIDA so that fans paying you can trust they are not paying an imposter. The verified name from NIDA replaces any self-entered name on your public profile.
- Prevent fraud, abuse, and unauthorised access.
- Improve the Service, diagnose crashes, and develop new features.
- Comply with legal obligations.
4. Legal basis (GDPR / similar)
We process personal data to perform our contract with you, with your consent (for optional features such as push notifications and marketing), to comply with legal obligations, and for our legitimate interests in operating and securing the Service.
5. How we share information
- Publicly on your profile: your display name, photo, age, gender, bio, linked social handles, and ratings/comments left by fans.
- Service providers: hosting (DigitalOcean), analytics & crash reporting (Google Firebase), SMS delivery (NEXT / MJUMBE), payment processors, identity verification (Tanzanian NIDA via our backend), and app stores (Apple, Google).
- Legal: if required by law, subpoena, or to protect the rights, safety, or property of Tumadm, our users, or the public.
- Business transfers: in connection with a merger, acquisition, or asset sale, with notice to you.
We do not sell your personal information. We do not share your NIN with advertisers, marketers, other creators, or fans — it is used only to verify your identity with NIDA and is never transmitted outside our secure backend except in encrypted requests to NIDA itself.
6. Data retention
We keep your account data while your account is active. When you delete your account, we delete or anonymise personal data within 30 days, except where retention is required for legal, tax, fraud-prevention, or dispute-resolution purposes.
7. Your rights
Depending on your jurisdiction you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights contact admin@omojadata.org. You can delete your account at any time from within the App.
8. Security
We use TLS/HTTPS for all traffic, hashed password storage, role-based access controls, and encrypted secrets. No system is 100% secure; please use a strong unique password and keep your device locked.
9. Children
The Service is not intended for users under 18. We do not knowingly collect information from children. If you believe a child has provided us data, contact us and we will delete it.
10. International transfers
Our infrastructure may be located outside your country of residence. Where applicable we rely on standard contractual clauses or equivalent safeguards for cross-border transfers.
11. Changes to this Policy
We may update this Policy from time to time. Material changes will be announced in the App or by email. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
12. Contact
Omojadata — admin@omojadata.org
tumadm.omojadata.org