What we hold about you, and why.

This policy applies to everyone who uses the TunaKua platform: borrowers financing a Local Purchase Order, investors funding one, corporate buyers issuing orders, suppliers receiving payment, and visitors to our public pages.

Account data. Your name, email address, phone number, the role you registered under, and the password you set, which is stored only as a one-way hash.

Verification data. The documents and details required to confirm who you are and that your business is real: national identity documents, business registration certificates, tax identification numbers, authorised signatory details and company letterheads.

Transaction data. Purchase orders, invoices, delivery confirmations, investment commitments, escrow balances, disbursements, settlements and payouts, together with the bank or mobile money destination you nominate.

Technical data. Log records of sign-ins and significant actions, device and browser information, and the cookie preferences you choose.

To create and secure your account; to verify identity and business standing before money moves; to match funding to verified orders; to hold funds in escrow and settle them in the agreed order; to pay suppliers and investors; to produce statements and reports; to detect fraud and misuse; and to meet the record keeping obligations that apply to financial activity in the United Republic of Tanzania.

We process data to perform the contract you enter when you use the platform, to comply with legal and regulatory obligations such as know-your-customer and anti money laundering checks, and for the legitimate interest of running a safe and auditable financing service. Where none of these apply, we ask for your consent, and you can withdraw it at any time.

Account and verification records are retained for as long as your account is active and for the statutory retention period afterwards. Transaction records are retained for the period required for financial record keeping. Technical logs are kept for a shorter operational period. When a retention period ends, records are deleted or irreversibly anonymised.

We never sell your data. We share only what is necessary, and only with: banks and mobile money providers that execute disbursements and settlements; escrow and payment partners; verification bodies and public registries used to confirm business and tax details; our infrastructure and hosting providers, who process data on our instructions; professional advisers bound by confidentiality; and regulators, courts or law enforcement where we are legally required to disclose.

Counterparties on a financed transaction see only what the transaction requires. An investor sees the order, the borrower business name and the funding terms, not your identity documents.

We use strictly necessary cookies to keep you signed in and to keep the platform secure. With your consent we also use preference and analytics cookies to remember your choices and understand how the pages are used. You can change your choice at any time.

Open cookie settings

You can ask us for a copy of the data we hold about you, correct anything inaccurate, ask us to delete data we no longer need, object to or restrict certain processing, and withdraw consent where processing rests on it. Some data must be retained even after a deletion request where the law requires it, and we will tell you when that applies.

You can update your own name, contact details and password at any time from your profile page in the platform.

Access is controlled by role, so staff and counterparties see only what their role requires. Documents are stored in restricted storage, passwords are hashed, connections are encrypted in transit, and every significant action on money or verification is written to an audit log. Payment instructions are issued only from the server and are protected against duplicate execution.

If we change how we handle data we will update this page and change the date above. Material changes will also be notified inside the platform.

For any question about this policy or a request about your data, write to info@tunakua.co.tz, call +255 762 929 878, or visit us at Ohio Street, Dar es Salaam, Tanzania. You can also use our contact page.