Digikadi ("Digikadi", "we", "us", "our") is a digital event invitation and management platform operated by Brandbox Company Limited, a company based in Dar es Salaam, Tanzania. This Privacy Policy explains what personal information we collect through our website (digikadi.co.tz), our web application (app.digikadi.co.tz), and our Android/iOS mobile app (together, the "Service"), how we use it, and the choices and rights you have.
By creating an account or otherwise using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.
1. Information We Collect
Account information. When you register, we collect your full name, username, gender, mobile number, and (optionally) your email address. Your password is stored in encrypted (hashed) form — we cannot see or recover your actual password.
Event information. If you create or manage an event, we store the event name, date, time, venue/location, description, ticket types, pricing, and contact details you enter.
Guest information. If you are an event organizer, the names and phone numbers/email addresses of the guests you invite are stored so that we can deliver invitations and generate and verify entry cards on your behalf. See "Your Responsibilities as an Organizer" in our Terms of Service.
Uploaded files. Images (for card/event branding) and spreadsheet files (for bulk guest import) that you choose to upload.
Usage and log data. We automatically record your IP address, browser/device information, and sign-in timestamps for account security and fraud prevention.
What we do not collect. We do not collect payment card details, your device's contact list, precise GPS location, or biometric data.
2. Camera Permission (Mobile App)
The Digikadi mobile app requests camera access solely to scan the QR code printed or displayed on a digital invitation card for entry verification at an event. The camera is never used for any other purpose, and no photos, videos, or camera images are stored or transmitted from your device — only the QR code's text content is read.
3. How We Use Your Information
- To create and operate your account and the events you manage;
- To deliver digital invitations and notifications via SMS, WhatsApp, and email;
- To generate and verify QR-coded entry cards at your events;
- To secure your account and detect or prevent fraud and abuse;
- To respond to your support requests; and
- To maintain and improve the Service.
We do not sell your personal data, and we do not use your personal data for third-party advertising.
4. How We Share Information
We share limited information with the following categories of service providers, solely so they can perform services on our behalf:
- SMS gateway providers — to deliver one-time passcodes and event notifications by text message;
- WhatsApp Business API providers (e.g. Beem Africa) — to deliver invitation links via WhatsApp, where you or your event organizer choose WhatsApp delivery;
- Email delivery providers — to send account and event-related emails.
We may also disclose information where required by law, legal process, or to protect the rights, property, or safety of Digikadi, our users, or the public. We do not otherwise sell or rent your personal data to third parties.
5. Cookies & Local Storage
Our marketing website uses Google Tag Manager, which may load analytics tools that use cookies to help us understand how the site is used.
Our web app stores your sign-in session token in your browser's local storage so you stay signed in — it does not use third-party advertising cookies. Our mobile app stores your sign-in session in your device's secure encrypted storage (Android Keystore / iOS Keychain).
6. Data Storage & Security
All communication between your device and our servers is encrypted using HTTPS/TLS. Passwords are stored using industry-standard one-way hashing and are never stored in plain text. While we take reasonable technical and organizational measures to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Data Retention
We retain your account and event data for as long as your account remains active. When you delete your account, we permanently delete your personal data within 30 days, except where we are required to retain certain records for longer to comply with a legal, tax, or regulatory obligation.
8. Your Rights
Subject to applicable law — including Tanzania's Personal Data Protection Act, 2022 — you have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Delete your account and associated personal data at any time (see "Account & Data Deletion" below);
- Withdraw consent to data collection, which may limit your ability to use parts of the Service; and
- Lodge a complaint with Tanzania's Personal Data Protection Commission.
9. Account & Data Deletion
You can request deletion of your Digikadi account and all associated personal data at any time, in either of these ways:
- In the mobile app: go to Profile → Delete Account and confirm. This immediately triggers deletion of your account and data.
- By email (no app or account access required): send a deletion request to info@digikadi.co.tz from the email address or with the phone number associated with your account, and we will process it without requiring you to reinstall or sign in to the app.
What is deleted: your account profile (name, username, gender, phone, email), your password, and events/guest lists you own are permanently deleted within 30 days.
What may be retained: records we are legally required to keep (e.g. for tax, accounting, or fraud-prevention purposes) are retained only for as long as the law requires, then deleted.
10. Children's Privacy
Digikadi is not directed at, and is not intended for use by, children under the age of 13, and account registration requires the account holder to meet the minimum age set out in our Terms of Service. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at info@digikadi.co.tz and we will take steps to delete it.
11. International Use
The Service is designed for use in Tanzania. If you access the Service from outside Tanzania, please be aware that your information will be transferred to and processed in Tanzania.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced within the app or on this page, and the "Last updated" date above will be revised accordingly. Your continued use of the Service after a change takes effect constitutes acceptance of the revised policy.
13. Contact Us
If you have questions about this Privacy Policy or how we handle your data, contact:
Brandbox Company Limited (Digikadi)
Dar es Salaam, Tanzania
Email: info@digikadi.co.tz
Phone: +255 682 552 845