Legal

Privacy Policy

How we collect, use, and protect personal information when you use Hakiki.

Draft — pending review by legal counsel before launch

Last updated: 27 June 2026

1. Who we are

Hakiki provides a consent-based KYC and KYB verification platform in Tanzania. This policy explains how we handle personal data when institutions use our services to verify individuals and businesses, and is intended to align with the Personal Data Protection Act, 2022 and its regulations.

2. Information we process

  • Verification subject data — identifiers submitted by our customers to run a check, such as a national ID reference, business registration number, name, or phone number.
  • Consent records — the method and timestamp evidencing that a verification was authorised.
  • Customer account data — contact details of the institutions that integrate with us.
  • Technical data — logs and metadata generated when the API is used.

3. How we use information

We process personal data to perform the verifications our customers request, to maintain an auditable record of those verifications, to secure and improve the platform, and to meet our legal and regulatory obligations.

4. Lawful basis and consent

Verifications are carried out on the basis of the consent of the data subject, captured by our customer at the point of collection, or another lawful basis where applicable. We retain a record of that consent.

5. Data minimisation and retention

We collect only what is necessary to perform a verification and retain verification and consent records for as long as required for audit and legal purposes, after which they are deleted or anonymised.

6. Sharing

To complete a verification we exchange the necessary data with the relevant connected source (for example a mobile operator or registry). We do not sell personal data.

7. Security

We apply technical and organisational measures including encryption in transit and at rest, access controls, and an append-only audit trail. See our data protection commitments for more.

8. Your rights

Subject to applicable law, individuals may request access to, correction of, or deletion of their personal data, and may object to or restrict certain processing. Requests can be made via the contact details below.

9. Contact

For privacy enquiries, contact us at privacy@hakiki.co.tz or through our contact page.