Sera ya Faragha
Imesasishwa mwisho: 27 Oktoba 2026
NyumbaLink TZ ("app", "sisi") ni jukwaa la kutafuta na kutangaza nyumba, viwanja na miradi ya viwanja Tanzania, pamoja na zana za usimamizi wa wapangaji kwa wenye nyumba, mawakala na wenye miradi. Sera hii inaeleza data tunayokusanya, tunavyoitumia, nani anaiona, na haki zako.
1. Data tunayokusanya
- Taarifa za akaunti: jina, jina la mtumiaji (@username, linaonekana kwenye wasifu wako wa umma), barua pepe, namba ya simu (hiari), picha ya wasifu, aina ya akaunti na lugha unayopendelea.
- Maudhui unayoweka: matangazo ya nyumba na viwanja (picha, video, maelezo, bei na eneo/koodineti za tangazo), miradi ya viwanja, posts, reviews, comments na ujumbe wa chat.
- Mahali ulipo: ukiruhusu, app inatumia mahali ulipo kuonyesha matangazo yaliyo karibu nawe, kuweka ramani mahali ulipo, kupima umbali na kutoa maelekezo. Hatuhifadhi mahali ulipo kwenye seva zetu. App inakumbuka sehemu ya mwisho ya ramani uliyoangalia, na utafutaji wako wa karibuni, kwenye simu yako tu.
- Matumizi ya app: matangazo na miradi unayofungua (na ulipoyaona: ramani, orodha au ukurasa wa mwanzo), unaposhiriki (share), vichujio unavyotumia, kama utafutaji wa eneo ulipata matokeo, na unapofungua ramani pamoja na eneo la takriban (karibu km 5). Tunahifadhi haya kama jumla za kila siku. Maneno unayoandika kwenye utafutaji hatuyahifadhi. Tunatumia namba ya akaunti yako tu kuhesabu kila mtu mara moja kwa siku.
- Maombi ya mawasiliano: ukibonyeza "Onyesha namba", piga au WhatsApp kwenye tangazo au wasifu, tunarekodi kuwa umeomba (akaunti yako, tangazo au akaunti husika, na muda) ili kuweka kikomo cha kila siku na kuzuia uvunaji wa namba za simu. Mwenye tangazo anaona idadi ya walioomba tu, si majina yao.
- Utafutaji uliohifadhiwa: vichujio na eneo unalohifadhi, ili tukujulishe matangazo mapya yanayolingana nayo.
- Ripoti na watu uliowazuia: ukiripoti tangazo, maoni au mtu, tunahifadhi ripoti yako (sababu, maelezo uliyoandika, na kama ilitoka kwenye chat au wasifu) ili admin aikague. Anayeripotiwa haambiwi nani aliripoti, na ujumbe wa chat haunakiliwi kwenye ripoti. Orodha ya watu uliowazuia inaonekana kwako tu, na aliyezuiwa haambiwi.
- Kumbukumbu za usimamizi: wenye nyumba na mawakala wanaweza kuweka kumbukumbu za wapangaji, mikataba, malipo ya kodi na matengenezo; wenye miradi wanaweza kuweka kumbukumbu za viwanja vilivyohifadhiwa na malipo ya awamu (pamoja na jina na simu ya mnunuzi). Zinaonekana kwa aliyeziweka na, panapohusika, kwa mpangaji aliyeunganishwa.
- Usajili kupitia wakala: wakala wa NyumbaLink akisajili nyumba yako kwa niaba yako, anarekodi jina lako, namba yako ya simu na mahali halisi pa nyumba. Namba yako na mahali halisi vinabaki siri; ramani ya umma inaonyesha eneo la takriban na jina lililofupishwa.
- Uthibitisho (KYC) na nyaraka: watangazaji wanaoomba beji ya uthibitisho wanaweza kuwasilisha namba ya NIDA au ya pasipoti (pamoja na picha yake na selfie ukiwa umekishika kitambulisho), au leseni ya biashara; wenye miradi wanaweza kupakia nyaraka za umiliki (mf. hati, ramani ya upimaji). Hukaguliwa na admin pekee.
- Data ya kiufundi: token ya arifa (push notifications), ripoti za hitilafu (crash reports), taarifa za msingi za kifaa kwa ajili ya kuboresha huduma, na namba ya utambulisho ya usakinishaji wa app (install ID). Namba hiyo hutengenezwa na app yenyewe bila mpangilio, si namba ya simu yako wala ya kifaa (IMEI), na tunaitumia tu kuzuia mtu mmoja kuchukua muda wa majaribio bure mara nyingi.
- Malipo ya huduma za NyumbaLink: ukilipia huduma ya NyumbaLink (kwa mfano dashibodi ya mwenye nyumba, kufungua mawasiliano ya nyumba au Area Pass), tunahifadhi oda, kiasi, namba ya simu au jina la akaunti uliyolipia, namba ya muamala (transaction ID), muda wa malipo, na nyumba ulizofungua au pass uliyonayo. Malipo hufanyika kwa pesa za simu au benki, nje ya app. Hatukusanyi namba za kadi wala PIN.
- Mapato ya mawakala: kwa NyumbaLink Agents, tunahifadhi mapato yao, namba ya pesa za simu na jina wanalotaka walipwe kwalo, na kumbukumbu za kila malipo tuliyowafanyia.
Kodi ya nyumba na malipo ya viwanja kati ya watumiaji hayapiti kwetu: app haipokei wala kushika pesa hizo, na kumbukumbu zake ni maandishi yanayowekwa na kuthibitishwa na mwenye nyumba au mwenye mradi.
2. Tunavyotumia data
- Kuendesha huduma: kuonyesha matangazo na ramani, kuunganisha wapangaji na wanunuzi na wenye nyumba au miradi, chats na arifa.
- Kukujulisha matangazo mapya yanayolingana na utafutaji uliohifadhi, na kuwakumbusha wenye matangazo kuthibitisha kuwa tangazo bado linapatikana.
- Kuwaonyesha wenye matangazo na miradi jinsi yanavyofanya, kwa idadi tu (waliofungua, walioomba namba, walioshiriki).
- Kuelewa mahitaji ya soko na kuboresha app, kwa takwimu za jumla.
- Kuthibitisha akaunti (barua pepe ya uthibitisho) na beji za watangazaji (KYC).
- Kuthibitisha malipo ya huduma, kukupa huduma uliyolipia, kuwalipa mawakala sehemu yao, na kutunza hesabu zinazotakiwa na sheria za kodi.
- Usalama: kuzuia matumizi mabaya, udanganyifu, spam, uvunaji wa namba za simu na matumizi mabaya ya muda wa majaribio bure.
- Kurekebisha hitilafu kupitia ripoti za hitilafu.
Hatuuzi data yako kwa mtu yeyote. App haina matangazo ya biashara wala zana za ufuatiliaji za makampuni mengine (third-party analytics au trackers).
3. Watoa huduma tunaowatumia
- Google Firebase: akaunti (Authentication), hifadhidata (Cloud Firestore) na huduma za seva (Cloud Functions). Data huhifadhiwa kwenye seva za Google.
- Cloudinary: kuhifadhi picha, video na nyaraka zinazopakiwa.
- Resend: kutuma barua pepe za mfumo (mf. uthibitisho wa akaunti) kutoka no-reply@nyumbalinktz.com.
- Expo: kutuma arifa (push notifications) na masasisho ya app.
- OpenStreetMap / Nominatim / OSRM: ramani, utafutaji wa maeneo, kutafsiri koodineti kuwa anwani (geocoding) na kukokotoa njia (maelekezo). Koodineti za eneo la tangazo, maandishi unayotafuta, na unapoomba maelekezo, mahali pa kuanzia na unakoenda (ikiwemo mahali ulipo ukichagua hivyo) hutumwa kwa huduma hizi ili kupata matokeo. Hatuhifadhi mahali ulipo kwa ajili ya maelekezo.
- Google Sign-In: ukichagua kuingia kwa Google, tunapokea jina, barua pepe na picha ya wasifu kutoka Google.
Watoa huduma hawa wanachakata data kwa niaba yetu tu, kwa mujibu wa mikataba na sera zao za faragha.
4. Data inayoonekana kwa wengine
- Matangazo na miradi (pamoja na eneo, picha, bei na jina la mtangazaji) yanaonekana hadharani ndani ya app.
- Namba ya simu na barua pepe ya mwenye tangazo hazionyeshwi hadharani. Namba hutolewa kwa mtumiaji aliyeingia na aliyethibitisha barua pepe anayeiomba, moja kwa wakati, kwa kikomo cha kila siku.
- Wasifu wako wa umma: jina, picha, aina ya akaunti, beji, ukadiriaji, idadi ya wafuasi, jina la kampuni (kwa mashirika), na kama uko mtandaoni au ulionekana lini mara ya mwisho (unaweza kuficha hili: Mipangilio → Onyesha nikiwa mtandaoni). Namba yako ya simu na barua pepe hazimo kwenye wasifu wa umma.
- Ujumbe wa chat unaonekana kwa washiriki wa mazungumzo husika tu. Admin hawezi kuusoma; anaona idadi ya mazungumzo na ujumbe tu.
- Uliza Wakazi (ukijiunga mwenyewe kama mpangaji): anayeuliza anaona eneo lako (kwa mfano Gongolamboto), kwamba wewe ni mpangaji aliyethibitishwa, muda uliokaa kwa makundi (kama miezi 6–12) na majibu yako, chini ya namba ya mkazi ("Mkazi #7"). Jina lako, namba ya simu na nyumba yako hazionyeshwi. Swali la mtafutaji linawafikia wakazi bila jina lake. Unaweza kuacha wakati wowote. Ukihama, rekodi yako ya mkazi inafutwa; ukifuta akaunti, maswali na majibu yako yanafutwa pia.
- Namba za NIDA, pasipoti au leseni na nyaraka za umiliki haziangaliwi na umma kamwe, ni admin wa uthibitisho pekee. Wanunuzi wanaona tu aina za nyaraka zilizothibitishwa.
5. Usalama
Data yote husafirishwa kwa muunganiko uliosimbwa (HTTPS/TLS). Upatikanaji wa hifadhidata unadhibitiwa na sheria za usalama (security rules) zinazobana kila mtumiaji kwenye data yake. Namba za simu za wenye matangazo zinahifadhiwa mbali na matangazo ya umma na kutolewa tu kupitia ombi linalorekodiwa. Nywila zako zinahifadhiwa na Firebase Authentication; hatuzioni wala kuzihifadhi sisi.
6. Kufuta akaunti na data
Unaweza kufuta akaunti yako moja kwa moja ndani ya app: Mipangilio (Settings) → Akaunti → Futa Akaunti. Hii inafuta mara moja akaunti yako ya kuingia na data zako: wasifu (pamoja na wasifu wa umma), matangazo, miradi, kumbukumbu, utafutaji uliohifadhiwa, kumbukumbu za maombi ya namba, ripoti ulizotuma na orodha ya uliowazuia. Ripoti kuhusu akaunti yako zinafutwa pia. Kwenye chats, jina na picha yako vinaondolewa; ujumbe uliotuma unabaki kwa mtu uliyekuwa ukiongea naye kama kumbukumbu yake, ukiandikwa "Akaunti imefutwa", na hakuna anayeweza kuendelea kuandika kwenye mazungumzo hayo. Maelezo kamili: nyumbalinktz.com/delete-account.
Kumbukumbu za malipo ya huduma na za mapato ya mawakala (oda, kiasi, namba za muamala, nyumba zilizofunguliwa) hazifutwi pamoja na akaunti. Tunazibakiza kwa muda unaotakiwa na sheria za kodi, kwa kawaida miaka 5.
Picha na nyaraka ulizopakia zinaondoka kwenye app mara moja. Mafaili yenyewe yanahifadhiwa na Cloudinary; ukitaka yafutwe huko pia, tuandikie kwenye anwani iliyo hapa chini nasi tutayafuta ndani ya siku 30.
Baada ya kufuta, tunabakiza kumbukumbu fupi kuwa akaunti ilifutwa (bila jina, barua pepe, simu wala maudhui) kwa hadi siku 180. Admin akiondoa akaunti kwa sababu ya matumizi mabaya, kumbukumbu hiyo inabeba pia misimbo ya njia moja (hash) ya barua pepe na simu ili mtu huyo atambulike akijisajili tena. Takwimu za matumizi zinabaki kama jumla za kila siku zisizokutambulisha.
7. Watoto
Huduma hii haielekezwi kwa watu chini ya miaka 18.
8. Mabadiliko ya sera
Tukibadilisha sera hii, tutasasisha tarehe iliyo juu na, kwa mabadiliko makubwa, kutoa taarifa ndani ya app.
9. Wasiliana nasi
Maswali ya faragha au maombi ya data: weisikosilvester@gmail.com
Privacy Policy
Last updated: 27 October 2026
NyumbaLink TZ ("the app", "we") is a platform for finding and listing homes, plots and land projects in Tanzania, with tenant-management tools for landlords, agents and developers. This policy explains what data we collect, how we use it, who can see it, and your rights.
1. Data we collect
- Account information: name, username (@username, shown on your public profile), email address, phone number (optional), profile photo, account type and preferred language.
- Content you provide: property listings (photos, videos, descriptions, price and the listing's location/coordinates), land projects, posts, reviews, comments and chat messages.
- Your location: with your permission, the app uses your location to show listings near you, centre the map, measure distances and give directions. We do not store your location on our servers. The app remembers your last map view and your recent searches on your phone only.
- App usage: the listings and projects you open (and where you saw them: map, list or home), shares, the filters you use, whether a place search found results, and when you open the map with an approximate area (about 5 km). We keep these as daily totals. We never store the words you type into search. Your account ID is used only to count each person once per day.
- Contact requests: when you tap "Show number", call or WhatsApp on a listing or profile, we record that you asked (your account, the listing or account, and the time) to apply a daily limit and stop phone numbers being harvested. The owner sees how many people asked, not who.
- Saved searches: the filters and area you save, so we can tell you about new matching listings.
- Reports and blocks: when you report a listing, comment or person, we keep your report (the reason, any details you write, and whether it came from a chat or a profile) so an admin can review it. The person reported is not told who reported them, and chat messages are not copied into reports. Your list of blocked people is visible only to you, and the blocked person is not told.
- Management records: landlords and agents may record tenants, leases, rent payments and maintenance; developers may record plot reservations and instalment payments (including a buyer's name and phone). These are visible to whoever created them and, where applicable, the linked tenant.
- Registration by an agent: if a NyumbaLink Agent registers your property for you, they record your name, phone number and the property's exact location. Your number and the exact location stay private; the public map shows an approximate point and a shortened name.
- Verification (KYC) and documents: posters requesting a verified badge may submit a NIDA or passport number (with a photo of it and a selfie holding it) or a business licence; developers may upload ownership documents (e.g. title deed, survey plan). Reviewed by admins only.
- Technical data: push-notification token, crash reports, basic device information used to improve the service, and an app-install ID. The app makes this ID up at random; it is not your phone number or the device's IMEI, and we use it only to stop one person from taking a free trial many times.
- Payments for NyumbaLink services: when you pay for a NyumbaLink service (for example the landlord dashboard, opening a house's contacts or an Area Pass), we keep the order, the amount, the phone number or account name you paid from, the transaction ID, the time of payment, and the houses you opened or the pass you hold. Payments are made by mobile money or bank, outside the app. We do not collect card numbers or PINs.
- Agent earnings: for NyumbaLink Agents we keep their earnings, the mobile-money number and name they want to be paid on, and a record of every payout we make to them.
Rent and plot payments between users never pass through us: the app does not receive or hold that money, and its payment entries are bookkeeping records created and confirmed by the landlord or developer.
2. How we use data
- Operating the service: showing listings and the map, connecting tenants and buyers with landlords and developers, chats and notifications.
- Telling you about new listings that match a saved search, and reminding owners to confirm a listing is still available.
- Showing owners and developers how their listings perform, as counts only (opens, number requests, shares).
- Understanding market demand and improving the app, using aggregate statistics.
- Account verification (verification emails) and poster badges (KYC).
- Confirming payments for services, giving you what you paid for, paying agents their share, and keeping the accounts tax law requires.
- Safety: preventing abuse, fraud, spam, phone-number harvesting and repeated free trials.
- Fixing problems through crash reports.
We never sell your data. The app has no advertising and no third-party analytics or tracking tools.
3. Service providers we use
- Google Firebase: sign-in (Authentication), database (Cloud Firestore) and server functions (Cloud Functions). Data is stored on Google's servers.
- Cloudinary: storage of uploaded photos, videos and documents.
- Resend: system emails (e.g. account verification) sent from no-reply@nyumbalinktz.com.
- Expo: push-notification delivery and app updates.
- OpenStreetMap / Nominatim / OSRM: maps, place search, converting coordinates to addresses (geocoding) and route calculation (directions). Listing coordinates, the text you search for and, when you request directions, the start and end points (including your current location if you choose it) are sent to these services to calculate results. We do not store your location for directions.
- Google Sign-In: if you sign in with Google, we receive your name, email and profile photo from Google.
These providers process data only on our behalf, under their own contracts and privacy policies.
4. Data visible to others
- Listings and land projects (including location, photos, price and the poster's name) are publicly visible in the app.
- A listing owner's phone number and email are not shown publicly. A number is given to a signed-in user with a verified email who asks for it, one at a time, within a daily limit.
- Your public profile: name, photo, account type, badges, ratings, follower counts, company name (for organisations), and whether you are online or when you were last seen (you can hide this: Settings → Show when I'm online). Your phone number and email are not on your public profile.
- Chat messages are visible only to the participants of that conversation. Admins can't read them; they see only the number of conversations and messages.
- Ask the residents (only if you join as a tenant): the person asking sees your area (for example Gongolamboto), that you are a verified tenant, how long you have lived there in ranges (such as 6–12 months) and your answers, under a resident number ("Resident #7"). Your name, phone number and home are never shown. A seeker's question reaches residents without their name. You can stop at any time. If you move out, your resident record is removed; if you delete your account, your questions and answers are deleted too.
- NIDA, passport or licence numbers and ownership documents are never publicly visible; verification admins only. Buyers see only which document types were verified.
5. Security
All data travels over encrypted connections (HTTPS/TLS). Database access is controlled by security rules that scope each user to their own data. Listing owners' phone numbers are stored apart from public listings and released only through a recorded request. Passwords are handled by Firebase Authentication; we never see or store them.
6. Deleting your account and data
You can delete your account directly in the app: Settings → Account → Delete Account. This immediately deletes your sign-in account and your data: your profile (including your public profile), listings, projects, records, saved searches, contact-request records, reports you sent and your blocked list. Reports about your account are deleted too. In chats, your name and photo are removed; the messages you sent stay with the person you talked to as their record, marked "Deleted account", and no one can write in that conversation any more. Full details: nyumbalinktz.com/delete-account.
Records of payments for services and of agent earnings (orders, amounts, transaction IDs, houses opened) are not deleted with the account. We keep them for as long as tax law requires, usually 5 years.
Photos and documents you uploaded disappear from the app at once. The files themselves are stored with Cloudinary; if you want them erased there too, write to the address below and we will delete them within 30 days.
After deletion we keep a short record that the account was deleted (no name, email, phone or content) for up to 180 days. If an admin removes an account for abuse, that record also holds one-way codes (hashes) of the email and phone so the same person can be recognised if they sign up again. Usage statistics remain only as daily totals that do not identify you.
7. Children
This service is not directed at people under 18.
8. Changes to this policy
If we change this policy we will update the date above and, for material changes, notify you in the app.
9. Contact us
Privacy questions or data requests: weisikosilvester@gmail.com