Privacy Policy

This Privacy Policy explains how iTaxApp handles information when you use our mobile application and related services.

Effective date: [Insert effective date] · Last updated: [Insert date]

1. Who we are

“iTaxApp”, “iTax”, “we”, “us” and “our” refer to the operator of the iTaxApp mobile application. iTaxApp provides business tools that may include point-of-sale (POS) functions, electronic receipt issuance, transaction records, Z reports, automated submission of reports to the Tanzania Revenue Authority (TRA), and access to previous submission or status reports.

Operator: [Insert registered business or legal entity name]
Contact: [Insert support email]
Address: [Insert business address, if applicable]

2. Information we may collect

The information processed depends on the features you use and the information you or your business enter. It may include:

• Account and authentication data: name, username, email address, phone number, account identifiers, authentication tokens, and password-related data. Passwords should be handled by the authentication provider and should not be stored as readable text by iTaxApp.
• Business and tax information: business name, taxpayer identification or registration details, tax device or fiscalisation identifiers, and other information needed to configure authorised tax services.
• Sales and receipt information: items, quantities, prices, discounts, taxes, totals, receipt numbers, timestamps, payment method details you enter, and relevant transaction references.
• Reporting information: Z reports, daily totals, report submission results, previous report status, error messages, and related audit or reconciliation records.
• Device and technical data: app version, device type, operating system, diagnostic logs, and security events where collected by the app or its service providers.
• Support communications: information you provide when contacting support or reporting a problem.

Do not enter full payment-card numbers, PINs, or other sensitive information unless the app explicitly provides a secure and authorised feature for that purpose.

3. How we use information

We may use information, as applicable, to:

• Create, authenticate, maintain, and secure user accounts.
• Provide POS functionality and create, display, store, and retrieve receipts and transaction records.
• Generate Z reports and submit required information to TRA or an authorised tax system when the feature is enabled.
• Show previous report statuses, acknowledgements, failures, and troubleshooting details.
• Synchronise business data, maintain records, investigate errors, prevent misuse, and provide customer support.
• Meet applicable tax, accounting, regulatory, and legal obligations.
• Improve reliability and usability using diagnostics or analytics, if these are enabled and disclosed.

4. When information may be shared

We do not sell personal information. Information may be disclosed only where appropriate for the purposes described in this policy, including:

• TRA and authorised tax systems: transaction, receipt, business, and report data required for fiscalisation, tax reporting, validation, or status checking.
• Service providers: hosting, database, authentication, crash reporting, customer support, or other vendors used to operate the service, subject to appropriate safeguards.
• Your business or authorised users: information available to account holders, business administrators, or staff according to their assigned access.
• Legal and safety purposes: where disclosure is required by law, a valid legal process, or necessary to protect rights, users, or service security.

TRA is a separate public authority. Data submitted to TRA may be processed and retained under TRA's systems and applicable laws; this policy does not replace TRA's own notices or legal requirements.

5. Legal basis and responsibilities

Where applicable under Tanzanian data protection law, we process information on relevant grounds such as providing the service, complying with legal obligations, pursuing legitimate operational interests, or obtaining consent where consent is required. The appropriate basis depends on the feature and the circumstances. Business customers are responsible for ensuring they have the authority and lawful basis to enter information about their customers and employees into iTaxApp.

6. Storage, security and international transfers

We use reasonable technical and organisational measures intended to protect information against unauthorised access, loss, misuse, or alteration. No internet-connected system can be guaranteed completely secure. Access should be limited to authorised personnel and protected with appropriate credentials and permissions.

Information may be processed in Tanzania or in other countries where our approved service providers operate. Where cross-border processing occurs, applicable legal requirements and appropriate safeguards should be followed. Before publishing this policy, the operator should confirm the actual hosting regions, vendors, backup arrangements, and retention settings.

7. Retention of information

We retain information for as long as needed to provide the service, maintain security and audit records, resolve disputes, and meet applicable tax and legal requirements. Tax receipts, transaction histories, and Z reports may need to be kept for a legally required period even after an account is closed. Retention periods depend on the type of record and the applicable requirements.

8. Your choices and rights

Subject to applicable law and any mandatory tax-record requirements, you may be able to request access to, correction of, or deletion of personal information, or object to or restrict certain processing. You may also withdraw consent where processing is based on consent. Some requests may be limited where records must be retained for legal or regulatory purposes.

To make a request, contact [Insert privacy/support email] and include enough information for us to verify your identity and locate the relevant account. Do not send your password.

9. Children

iTaxApp is a business and tax-compliance tool and is not intended for children. If you believe a child has provided personal information to us, contact us so we can assess the appropriate action.

10. Changes to this policy

We may update this policy to reflect changes to the app, applicable law, or our data practices. We will update the “Last updated” date and provide additional notice where required.

11. Contact us

For privacy questions, data requests, or concerns about this policy, contact:

This document is a starting template for the iTaxApp operator and is not legal advice. Have it reviewed against the app’s real data flows and applicable Tanzanian requirements before publication.