Privacy Policy

1Who we are

Cheza4Afya Akili ("Cheza4Afya Akili", "we", "us") is a mental-wellness platform for children, built by Masanja Technologies, offered through schools and directly to parents in Tanzania and other markets where our web and mobile apps are available. This policy covers our website, our Android and iOS apps, and the services behind them.

2What we collect

What we collect depends on your role:

3Why we collect it

• To run the core product — check-ins, games, stories, Tumaini conversations, and progress tracking.
• To let a parent see their own child's wellbeing trends and manage screen-time and app access.
• To let a school's staff support their own students' wellbeing, within the scope their role allows.
• To identify and respond to genuine safety concerns — see Safety & safeguarding below.
• To keep accounts secure, and to meet legal and record-keeping obligations.
• We do not use your data for advertising, and we do not sell personal data to third parties.

4Children's accounts & parental role

Children do not create their own accounts. A student account is created by a parent or by their school, and is linked to a specific parent through a verified process. Children log in with a student number and a secret code — not an email or password — and cannot change this credential themselves; only a parent or authorised school staff member can reset it. A parent can review their child's wellbeing trends, manage screen-time limits, and control certain aspects of their child's account.

When a student turns 18, their account is no longer treated as a child's account and the youth experience is retired.

5Who can see what

Access is scoped tightly to what each role actually needs:

• A parent sees their own linked child's wellbeing trends and settings — never another family's.
• A teacher sees wellbeing information only for students in their own classes.
• A school administrator sees information scoped to their own school.
• A child's private conversations with Tumaini are not shown to parents or teachers. They are only ever reviewed by designated safeguarding staff, and only when there is a genuine safety reason to do so — see below.

6Safety & safeguarding

Cheza4Afya Akili is designed to support children's emotional wellbeing, not to replace a mental-health professional. If a conversation or check-in suggests a child may be at risk, our system can flag it for review by trained safeguarding staff. Every time a member of staff opens a child's private conversation for this reason, that access is logged — who, when, and why — so it can always be accounted for. This is the only circumstance in which a private conversation is read by a human.

7Third-party services we use

We rely on a small number of specialist providers to run the service. Where a provider processes personal data, we only send what's needed for that specific purpose:

• Cloud hosting — to run our servers and store data securely.
• Translation services — to offer the app in multiple languages, page text may be sent to a translation provider and cached for reuse.
• AI voice narration — used for select story content read aloud in the app.
• Push notification services — to deliver notifications to your device (Android/iOS).
• Payment processing — only where a paid feature is explicitly used; we do not store full payment card details ourselves.

Some of these providers may process data outside Tanzania. We only work with providers who meet appropriate data-protection standards for the type of data involved.

8How long we keep data

We keep account and wellbeing data for as long as the account is active, plus a further period needed for safeguarding accountability, legal, and record-keeping purposes. We do not automatically delete safeguarding case records, so that a genuine concern can always be followed up properly. Retention is reviewed on an ongoing basis; a parent or account holder can request deletion of personal data subject to these safeguarding and legal obligations — see Data Rights.

9Your rights

Depending on your location, you may have rights to access, correct, export, or request deletion of your personal data, and to object to certain processing. A parent can exercise these rights on behalf of their child. Full detail is on our Data Rights page.

10Security

We use industry-standard measures to protect data in transit and at rest, restrict access by role, require additional verification for staff accessing the most sensitive records, and keep audit logs of sensitive access. No system is completely immune to risk, and we keep these protections under review.

11Changes to this policy

We may update this policy as the product changes. We'll update the date below when we do, and where a change is significant, we'll take reasonable steps to let account holders know.

Last updated: [add date on publish]