Privacy Policy

Who handles your information

TUDUMU Financial Services Limited is responsible for the personal information it uses to provide its website, lending services and authorised-user portal. Mangi is the name of our digital assistant; Tudumu Mangi is the name of our Meta application.

This policy covers applicants, customers, reference contacts, group representatives, portal users and people who contact us. The privacy contact shown on this page handles questions and requests about your information.

Information we receive

The information depends on the service you use. It may include:

• Identity and contact details, such as your name, date of birth, NIDA number, phone number and email address.
• Employment and income details, requested loan terms, bank account details, bank statements, supporting documents and the consent you give for checks.
• Customer, reference-contact and group records supplied by you or an authorised representative, plus credit-bureau results, affordability assessments, loan decisions and repayment records.
• Portal account details, sign-in sessions, permissions and activity records. If you link a Google account, the sign-in service supplies account information such as your name, email address and profile image.
• Messages you choose to send, service enquiries, complaints and delivery records. The website and its hosting services also process technical information such as IP addresses and request details to operate and protect the service.

Why we use it

We use information to respond to enquiries, register and identify customers, assess applications, check income and affordability, prevent fraud, administer approved loans and repayments, provide account access, send service updates and handle complaints.

A submitted loan request is recorded and may be linked to a customer profile before a loan is approved. Relevant statements, checks and later lending records remain linked so authorised staff can review the same case without asking you to submit everything again.

We use the consent requested in the relevant form for statement and credit-bureau checks. Other processing may be necessary to respond to your request, perform an agreement, protect the service or meet applicable legal obligations. Where processing depends on consent, you can contact us to withdraw it; withdrawal does not reverse processing already lawfully completed.

Automated checks and lending review

Loan assessment can involve automated document-ownership and date checks, bank-statement analysis, credit-bureau enquiries and affordability calculations. These checks can affect which stage your request reaches and whether we ask for more information or a revised amount.

An automated result is not a final loan agreement or a guarantee of disbursement. Staff review and the required lending approvals still apply. Contact us if information appears wrong or you want an explanation or a human review of an assessment.

Mangi and WhatsApp

Mangi is under development and is not available on the public website yet. In controlled website testing, a question, limited recent conversation history, language and page context are sent to our application and self-hosted inference service to generate a reply. This chat does not read private customer records. The application does not save these conversations as database or browser local-storage transcripts; starting a new conversation or refreshing clears the displayed chat.

In controlled portal testing, access depends on the tester's permissions. Where page-data assistance is explicitly enabled, selected authorised record facts are used for that answer. The portal records activity metadata for audit purposes, not the conversation text.

The Tudumu Mangi WhatsApp integration is currently a test receiver, not a public automated loan or chat service. It verifies incoming events and retains limited event information such as type, delivery status, timestamps, error codes and hashed message identifiers. This receiver does not retain message text, phone numbers, names or attachments, and it does not generate replies.

WhatsApp itself is operated by Meta. Contacting the company's existing WhatsApp number is separate from the Mangi test integration, and correspondence handled by staff can form part of an enquiry or customer record. Meta and other communication providers process information under their own terms. We will update this notice before materially changing Mangi's collection or conversation-retention behaviour.

Do not put passwords, PINs, OTP codes, full identity numbers, bank details or documents into Mangi chat. Use the designated secure application forms for information needed to assess a loan.

Service providers and protection

Information needed for a particular service may be processed by our hosting and private-file-storage providers, authorised document-analysis and credit-bureau services, messaging providers, and banking or mandate providers involved in an approved transaction. Authorised employees and group representatives have access according to their assigned roles and scope. Information may also be disclosed where required by law or to address a dispute.

Some providers may process information outside Tanzania. Contact us for information about the providers, locations and arrangements relevant to your case; this notice does not claim that every record stays in Tanzania.

The application uses authenticated access, action-specific permissions, private document storage, controlled file access and audit records. No internet service can guarantee absolute security. Report suspected misuse promptly and never share your password, OTP or private request-tracking link.

Browser storage and external services

The website and portal use cookies and browser storage for functions such as authentication, language, appearance and saved view preferences. Clearing this storage can reset preferences or sign you out; it does not delete records held by TUDUMU.

The contact page embeds a Google map. Loading an embedded service or following a link to WhatsApp or another external site can disclose technical information to that provider. Its own privacy notice applies to its processing.

Retention and deletion

Application, customer, consent, assessment, loan, payment, communication and audit records are retained for their relevant operational, contractual, legal and dispute-handling purposes. The appropriate period depends on the record and the obligations that apply; this notice does not promise one automatic deletion period for all records.

You can request deletion or ask what information remains and why. We review the request and explain what can be removed, what must be retained and the expected next steps. A withdrawn application, closed account or deleted chat on your device does not by itself erase our records. Deletion of personal information does not cancel an outstanding loan obligation.

Your choices and complaints

Subject to applicable law, you may ask about our use of your data, request access or correction, request deletion or restrictions, object to processing, withdraw consent, or raise concerns about automated assessment. Use the privacy contact on this page; we may need to verify your identity before disclosing or changing records.

You may also raise a privacy concern with Tanzania's Personal Data Protection Commission (PDPC). The Data Deletion page explains our request process. Any material changes to this notice will be reflected in the updated date and published wording.