1. Scope and responsibility
This notice covers the ShuleSasa website, enquiries, user accounts, demonstrations and institution workspaces. ShuleSasa is an education management service presented through Vozua. We handle website and account information to operate the service. For records entered by an institution, that institution determines the purposes of processing; ShuleSasa handles those records on its instructions, subject to the applicable service and data processing agreement.
2. Information we process
Enquiries may include your name, role, institution, business contact details, country, institution type, size and message. Accounts include registration details, password hashes, institution settings and account activity. Depending on the modules an institution uses, its records may include learner and guardian details, admissions, classes, attendance, assessment results, staff, hostel and transport records, invoices and recorded payments. Technical information includes session identifiers, IP addresses and security or error logs. Do not place confidential learner information in public enquiry forms.
3. Purpose and legal basis
We use information to respond to enquiries, authenticate users, maintain institution records, provide requested functions, investigate errors and protect the service. The relevant basis may be performance of a contract, a legal duty, a legitimate operational interest or consent, depending on the purpose and applicable law. Institutions are responsible for identifying a lawful basis for their records and for providing appropriate notices. An enquiry does not enrol you in a marketing list. We do not sell personal information or use institution records for advertising.
4. Children and institution records
Institution accounts must be administered by authorised adults. An institution must establish its authority to enter learner and guardian information, obtain parental or guardian permission where required, and limit access to staff with a legitimate role. Public demonstrations use fictional records and must not be used for real student files. Requests about a learner’s school record should normally go first to the institution, which can confirm the requester’s authority and instruct us where assistance is needed.
5. Service providers and disclosures
Hosting and technical service providers process information needed to operate and maintain the service. If enabled and requested, payment and SMS providers receive the transaction or delivery details required for that operation. WhatsApp receives the information you choose to send when you submit a prepared message. Map services may receive technical requests when a map is opened. Providers apply their own terms to services they operate independently. We may disclose information where legally required or necessary to investigate misuse and protect lawful rights. We do not give an institution access to another institution’s records.
6. Cookies and browser storage
Essential cookies maintain sign-in sessions and help prevent unauthorised form submissions. Browser storage may retain interface preferences and unfinished enquiry details. These functions are used for service operation, not advertising profiling. The public website does not currently load advertising or third-party analytics scripts. You can clear cookies and site data in your browser; doing so can sign you out and remove saved preferences or enquiry drafts. Third-party destinations may set their own cookies after you open them.
7. Retention and account closure
Information is retained for the purpose for which it was collected and for relevant contractual, accounting, security or legal requirements. Enquiries are subject to review within 12 months; information still needed for an active relationship, dispute or legal obligation may be retained longer. Institution record retention, export and deletion must be agreed with the institution and follow applicable recordkeeping duties. Removing a record from active use may not immediately remove a protected backup or a security log. Contact us to request the retention arrangements for your institution before onboarding sensitive records.
8. Security and international processing
The service uses HTTPS, authenticated sessions, password hashing, institution separation and restricted server storage. Security also depends on institution access decisions, user devices and appropriate handling of exports. No online system can guarantee absolute security. Hosting, support or an enabled provider may involve processing outside your country. Applicable transfer restrictions and safeguards must be assessed for the intended deployment; country-specific hosting or data residency is not promised by this notice. Material security incidents are handled with the affected institution and relevant authorities as required by applicable law.
9. Your rights and requests
Subject to applicable law and the nature of the processing, you may request information about use of your data, access, correction, deletion, restriction, portability or objection, and withdraw consent where processing relies on it. Withdrawing consent does not invalidate earlier lawful processing. We may need proportionate identity and authority checks, and a legal duty may limit a request. Use the contact page and identify the relevant account or institution without including a password, PIN or OTP. You may also raise a complaint with the competent data protection authority.
10. Contact and changes
For privacy enquiries, use the Contact page or the ShuleSasa business WhatsApp number +255 769 300 005 and mark the request “Privacy”. Send only the information needed to identify and explain your request. We update this notice when processing or service arrangements change and show the revision date. Material changes affecting an institution service will be communicated through the agreed service contact or account channel. A signed data processing agreement prevails for institution-specific commitments.
Regulatory information
Personal Data Protection Commission · Tanzania
Office of the Data Protection Commissioner · Kenya
Registration, access and licences
Product videos are publicly available without registration. A 14-day card-free trial is available. After trial expiry, the operational workspace requires a provider-verified paid entitlement. Monthly and annual plans expire at the end of the paid period. A one-time licence grants continued use of the current software for one institution; it does not transfer copyright or source-code ownership. SMS credits, third-party payment fees, additional hosting or support services are subject to the applicable order. Do not submit real student information in demonstration material.