Damotiva Enterprises ("Damotiva", "we", "us" or "our") respects your privacy. This Privacy Policy
explains what personal data we collect when you use
damotiva.com and our other products,
how we use and protect it, and the choices and rights you have. We process personal data in line with the
Personal Data Protection Act, 2022 of the United Republic of Tanzania and other applicable laws. This policy
forms part of our Terms and Conditions.
In short
We collect what we need to run your account, process payments and deliver the services you use.
Payments go through PesaKonnect. We never see or store your mobile money PIN or full card number.
We do not sell your personal data.
Content you upload (videos, audio, books, documents) is used to deliver the service you asked for.
You can ask us to access, correct or delete your data at any time.
1. Who We Are and What This Policy Covers
Damotiva is a technology company based in Mbeya, Tanzania. We are responsible, as the data
controller, for the personal data described in this policy. It applies to the following products and to
any Damotiva product launched later:
Some products let businesses (such as pharmacies, clinics, hospitals or merchants) store data about their
own customers or patients. In that case the business is responsible for that data and we process it on
their behalf. See section 8.
2. Personal Data We Collect
Information you give us
Account details: name, email address, phone number, username, password (stored in encrypted form), preferred language and country.
Business details: business name, address, registration or TIN details and staff accounts, where a product requires them.
Your content: videos, audio, books, documents, text and other files you upload for hosting, translation, transcription, dubbing, OCR or other processing.
Communications: messages you send to support, waitlist sign-ups, feedback and survey responses.
Merchant verification: if you collect payments through PesaKonnect, the identity and business documents needed for verification.
Information collected through payments
Transaction reference, amount, currency, date, product, payment method type, the phone number used for mobile money, and the payment status.
Card payments are handled by our payment providers. We may receive only limited details such as the card type and last four digits.
Information collected automatically
Device and browser type, IP address, approximate location (country or city), pages visited, features used, and date and time of access.
Log and error data that helps us keep the services secure and working.
Cookies and similar technologies (see section 9).
Information from others
Payment confirmations from payment providers and mobile network operators.
Referral codes from resellers who introduced you to a product.
Details added by a business you deal with, for example a pharmacy or clinic using one of our products.
3. How We Use Your Data
to create and manage your account and let you sign in across Damotiva products;
to deliver the services you request, including processing, translating, dubbing and hosting your content;
to process payments, activations and subscriptions through PesaKonnect, and to handle refunds;
to send service messages such as receipts, payment reminders, security alerts and notifications by email, SMS or WhatsApp;
to provide customer support and respond to your requests;
to track reseller referrals and pay commissions;
to monitor, secure and improve our services, and to detect and prevent fraud and abuse;
to send news and offers about our products, where you have agreed or where the law allows (you can opt out at any time);
to comply with legal, tax, accounting and regulatory obligations.
4. Legal Basis for Processing
We process personal data only where we have a lawful basis, including:
Contract: to provide the services you signed up and paid for.
Consent: for example for marketing messages or optional features. You can withdraw consent at any time.
Legal obligation: for example keeping payment and tax records.
Legitimate interests: for example securing our systems, preventing fraud and improving our products, where these interests are not overridden by your rights.
5. Your Uploaded Content and AI Processing
We use the content you upload only to provide the service you requested, such as hosting, translation, transcription, subtitles or voice dubbing.
Some processing uses artificial intelligence, which may be run by us or by trusted AI service providers acting on our instructions.
We do not use your private content to train AI models made available to others without your permission.
Content you choose to publish publicly on Damotiva (for example a public video, audio or book) can be seen by anyone.
If your content contains other people's personal data, you are responsible for having the right to share it with us.
6. When We Share Your Data
We do not sell or rent your personal data. We share it only as needed with:
Payment providers connected through PesaKonnect, such as mobile money operators, card processors and payment aggregators, to complete and verify payments.
Service providers who host, store, process or deliver our services on our behalf, such as cloud hosting, file storage, email, SMS and messaging providers, and AI service providers. They may use the data only to provide their services to us.
Resellers, limited to what is needed to confirm a referral and calculate commission. Resellers do not receive your payment details or content.
Businesses you deal with, where you use a product through them (for example a clinic using eMedicVerse).
Authorities, when required by law, court order or a lawful request, or to protect the rights, safety and property of Damotiva, our users or others.
A buyer or successor, if Damotiva or one of its products is merged, sold or restructured. This policy will continue to protect your data.
7. International Transfers
Some of our service providers, such as cloud hosting, storage and AI providers, may store or process data
outside the United Republic of Tanzania. When this happens, we take steps required by law to make sure your
data stays adequately protected, such as working with reputable providers and using contractual safeguards.
8. Data Businesses Store in Our Products
Products such as VitalPoint, eMedicVerse and FlowSignal let businesses record data about their own
customers or patients, which may include health information. For that data:
the business is responsible for collecting it lawfully, informing its customers or patients, and obtaining consent where required;
we process it only on the business's instructions to provide the product, and do not use it for our own purposes;
we protect it with extra access controls given its sensitivity;
if you are a customer or patient of such a business, please send requests about your data to that business first. We will help them respond.
9. Cookies and Similar Technologies
We use cookies and browser storage to:
keep you signed in and remember your language and settings (essential);
keep the services secure and prevent fraud (essential);
understand how our websites are used so we can improve them (analytics).
You can block or delete cookies in your browser settings. If you block essential cookies, some parts of the
services, such as signing in, may not work.
10. How We Protect Your Data
We use technical and organisational measures to protect personal data, including encrypted connections
(HTTPS), encrypted password storage, access controls limited to staff who need access, and monitoring of
our systems. No system is completely secure, so please keep your password and API keys safe and tell us
immediately if you suspect unauthorised access. If a data breach is likely to affect you, we will notify you
and the relevant authority as required by law.
11. How Long We Keep Your Data
Account data: while your account is active, and for a limited period after closure to handle follow-up requests.
Uploaded content: until you delete it or close your account, after which it is deleted within a reasonable period, except backups that are overwritten on a regular cycle.
Payment and tax records: for the period required by Tanzanian tax and accounting laws.
Logs and security data: for a limited period, unless needed to investigate an incident.
When data is no longer needed, we delete it or make it anonymous.
12. Your Rights
Subject to the law, you have the right to:
be informed about how your personal data is used;
access a copy of the personal data we hold about you;
correct data that is inaccurate or incomplete;
ask us to delete your data where it is no longer needed or was processed unlawfully;
object to or restrict certain processing, including direct marketing;
withdraw consent at any time, without affecting processing done before;
complain to the Personal Data Protection Commission of Tanzania.
To use these rights, contact us at moto@damotiva.com. We may need
to verify your identity before acting on your request, and we aim to respond within 30 days. You can also
update most account details yourself from your account settings.
13. Children
Our services are not directed at children under 18 without the consent of a parent or guardian. We do not
knowingly collect personal data from children without that consent. If you believe a child has given us
personal data, contact us and we will delete it.
14. Third-Party Links
Our services may link to websites or services we do not control, such as payment pages or social media.
Their own privacy policies apply, and we are not responsible for how they handle your data.
15. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date shows when it last changed. For
significant changes we will notify you through the services or by email.
16. Contact Us
For privacy questions or to use your rights, contact: