Draft: this page is under legal review and some details are still to be confirmed.

Legal

Data protection

Last updated 23 October 2026

Codeblock complies with the Personal Data Protection Act, 2022 of Tanzania and its regulations, and is registered with the Personal Data Protection Commission (PDPC), registration number to be confirmed.

Two roles

  • Controller of the data in your datahuru account: who you are, your teams, sessions and billing. Our privacy policy covers it.
  • Processor of the personal data your apps hold about your own users. You are its controller: you decide what is collected and why, and we host and process it only on your instructions, as needed to run your apps.

As your processor, we

  • process your apps' data only to provide the service, and never for our own purposes;
  • store it in the region you chose for each app, and only in the data centres named in our privacy policy;
  • restrict staff access to support you, and record every time staff open your team, on your team's page;
  • help you answer requests from your users and meet your obligations, as far as the service allows;
  • tell you without undue delay if we learn of a breach affecting your data;
  • delete your apps' data when you delete them or close your account.

How we protect data

  • Traffic to the dashboard and your apps is encrypted with TLS.
  • Variables you mark secret are encrypted with AES-256 before they are stored; the key is kept apart from the database.
  • Passwords are stored only as Argon2id hashes. Sign-in is rate-limited and sign-in links are single use.
  • Each team's apps run separately from other teams', under restricted security settings.

Breaches

If a breach puts personal data at risk, we notify the PDPC and the people affected as the Act requires.

Your rights

Under the Act you may ask us to tell you what personal data we hold about you and give you a copy, correct what is wrong, delete it or stop processing it, and object to its use for direct marketing. Write to privacy@datahuru.com. We answer within the time the Act allows.

If you are not satisfied with our answer, you may complain to the Personal Data Protection Commission.

Contact

Data protection questions: privacy@datahuru.com. Codeblock, to be confirmed.