Privacy Policy

• You can search, compare and check eligibility without an account.
• If you open an account we keep your name, email, phone number, age, a scrambled password and a few details about the children you add — nothing more.
• We do not store the exam results you enter in “Am I eligible?”; they are used once and forgotten.
• We do not sell your data. We do not send children’s details to schools.
• You can download or delete your data at any time in your account.

• Account: first and last name, email (for contact and signing in), phone number (for signing in and confirming by SMS), age (to make sure account holders are 18 or over), preferred language, when you joined and last signed in.
• Password: stored only in scrambled form (a hash); nobody can read it, including us.
• Children you add: name, class/form, optionally date of birth and sex, and your relationship (parent/guardian).
• Consents: what you agreed to (Terms, Privacy, guardian consent, SMS reminders), the policy version and date.
• Security: sign-in sessions (browser, IP address, times), hashed sign-in codes (never stored in clear), and security event logs.
• Language: one cookie (ss_lang) remembers the language you chose for a year, across all our sites. It holds nothing else.
• Signed in: while you are signed in, one cookie (ss_in) tells our pages to show “Account” instead of “Sign in”. It holds only the number 1, nothing about you, and ends when you sign out.
• We do not collect: the exam results you type into the eligibility checker, or anyone else’s results. School results are aggregate (NECTA) only.

• To provide the service you asked for (sign-in, managing children, lists and plans) — with your consent and to perform the service.
• A minor’s details are kept only with parent/guardian consent; an unknown date of birth is treated as a minor.
• To send application-date reminders — only if you opt in, and you can switch them off at any time.
• To protect the service from abuse (attempt limits, security logs).

• The SMS provider receives your number to deliver sign-in codes or reminders you opted into.
• The hosting and database provider stores data on our behalf under contract.
• We never sell or rent your data, and we do not send children’s details to schools. Applications are made on the official systems (TAMISEMI, NACTVET, TCU or the institution), not through ShuleSearch.
• We disclose data to authorities only when the law requires it.

• Account and children: until you delete them. Deleting the account erases your number, name, email, age, password and the children only you manage immediately.
• Unfinished registrations (SMS code not entered): deleted after 30 minutes.
• Removing a child erases their details immediately (if another guardian also manages the child, the child stays with them).
• Sign-in codes expire after 10 minutes. Sessions last 30 days (staff: 8 hours).
• Security and consent records are kept as legal evidence, without number or name once the account is deleted.

• Access and portability: “Download my data” in your account.
• Correction: edit your profile and children’s details in the account.
• Erasure: “Delete account”, or “Remove” a child.
• Withdraw consent: switch off SMS reminders in the account; withdrawing Terms/Privacy means deleting the account.
• Complain: you may complain to Tanzania’s Personal Data Protection Commission (PDPC).

All traffic uses HTTPS. Sign-in codes and session tokens are stored only as hashes. Staff sign in with personal two-step accounts (SMS and an authenticator app), and every administrative action is logged.

Every version is numbered (currently v1). If the policy changes in a way that affects your rights, we will ask for your consent again when you sign in.