Privacy Notice

If you are a tenant: the landlord or agency you rent from is responsible for your information. They decided to collect it and they are the ones you ask. Kabolik Company Ltd, the company behind Kodi, is only the processor — we hold it on their instructions.

If you are a landlord or invited staff: Kabolik Company Ltd is responsible for your account data — name, phone number, email, usage and audit records — and you exercise your rights against us.

• Identity: name, phone number, NIDA number, occupation, and the identity documents you upload.
• Tenancy: the frame or unit you rent, the term of the agreement, its written terms, witnesses and signatures.
• Money: rent and service charge, the payments you have made, receipts and any arrears.
• Contact: a record of the SMS messages sent to you and of logged follow-up calls.

• For the agreement: identity and payment records are needed for a tenancy to exist and be followed up. These cannot be removed while the tenancy is running.
• With your consent: marketing messages only. You may withdraw consent at any time and it stops immediately, with no argument.
• Because the law requires it: financial records that tax law obliges us to keep.

Only your landlord and the staff they have authorised. A caretaker sees only the frames and units they are assigned and cannot read your NIDA number. An accountant sees money without identity. We never sell or rent it to anyone.

• The messaging providers who deliver SMS and WhatsApp on the landlord's behalf — NextSMS, and the WhatsApp Cloud API operated by Meta. They receive the recipient's phone number and the message content.
• The email provider who delivers verification codes to staff — Resend. It receives the staff member’s email address and the text of that code. No tenant data ever reaches it.
• Our hosting provider, which holds the servers the platform runs on, and anyone the law, a court order, or a regulator lawfully requires.

Kabolik staff cannot browse your data. There is no administrative view across organisations. If our support team needs access, they must request it, the landlord must approve it in the platform, and the access expires automatically after two hours and is recorded in full.

At present outside Tanzania, on hosting infrastructure in the European Union, for the duration of the current field test. An application for a cross-border data transfer permit is with the Personal Data Protection Commission (PDPC) and has not been granted. Hosting returns to a data centre in Dar es Salaam when that contract is concluded.

Separately from where the data is held, two message routes leave Tanzania. First: when a message is sent by WhatsApp, the recipient’s phone number and the message content are handled by Meta Platforms outside Tanzania. Messages sent by SMS through NextSMS stay within Tanzania.

Second: a verification code sent by email is handled by Resend outside Tanzania. This applies only to staff who sign in with an email address; no tenant data travels this route.

Financial records are kept for as long as tax law requires. Everything else is kept while your tenancy runs and for the period your landlord has set after you leave. Ask your landlord what period they have set.

• Ask for a copy of everything held about you.
• Ask for anything inaccurate to be corrected.
• Ask for your information to be erased, where no running tenancy, outstanding debt or legal obligation requires it to be kept.
• Withdraw consent for marketing messages at any time, while receipts and tenancy messages continue.

Tell your landlord or agency. They have a button inside Kodi to open your request, verify it and answer it — and every step is recorded.

Kodi sets a session cookie so you stay signed in. It is strictly necessary; the platform cannot work without it.

It also sets a language cookie remembering whether you chose Swahili or English. We use no advertising cookies and no third-party tracking.

If you install Kodi on your phone, part of your work is stored on the device so it works without a network. Identity numbers, identity documents, and contract PDFs are never stored on the device. Clearing your browser data or signing out removes the stored copy.

If you hold a Kodi subscription you are the data controller and Kabolik is the processor. The terms that bind us — instructions, confidentiality, security, sub-processors, breaches, and deletion — are Part B of the full Privacy Notice, and form part of the Terms of Service.

Kabolik Company Ltd, No. 11, Kijitonyama, Dar es Salaam. Email: legal@kodi.co.tz. If you are not satisfied with the answer, you may complain to Tanzania's Personal Data Protection Commission (PDPC).