Legal
Privacy policy
Last updated 24 October 2026
This policy explains what personal data Codeblock collects when you use datahuru and this website, why, how long we keep it and who we share it with. Codeblock is the data controller for this data. For personal data your own apps process, see data protection.
What we collect
- Account: your email address and, if you set them, your name and a password, which is stored only as a one-way hash.
- Teams: which teams you belong to and your role in each, and invitations you send or receive.
- Sessions and security: for each signed-in browser, its IP address and browser type, so you can see and end your sessions. Sign-in attempts are counted by address and IP address to stop guessing.
- Billing: your balance, the hours charged, top-ups and the phone number used for a mobile money top-up. Card payments are made on ClickPesa's own page: we never see card numbers.
- Your apps: their settings, variables and logs, including the request log of each app (method, path, status, time and the visitor's IP address).
- Support access: when our staff open your team to help you, who did it and when. This is shown on your team's page.
- This website: the email address you leave to request access. The site sets no cookies and uses no analytics or trackers.
Why
- To provide the service you signed up for, and to bill for it (the contract between us).
- To keep accounts and the service secure, and to investigate abuse (our legitimate interest in a safe service).
- To keep tax and accounting records (a legal obligation).
- To write to you about your account: sign-in links, invitations, billing alerts and changes to these terms. We do not send marketing without your consent.
Cookies
The dashboard sets one cookie to keep you signed in, and a short-lived one to show a message after a form is submitted. Both are needed for it to work. This website sets none.
Who we share it with
- ClickPesa, to take payments.
- Cloudflare, Inc., which delivers sign-in links and account messages, answers for our domain's DNS, and stores our backups in the European Union. It may process your email address outside Tanzania, under safeguards the law requires.
- Hetzner Online GmbH, in Germany, whose data centre hosts our servers in our Germany region. It does not access your data. Data centre providers in Tanzania will host the servers of a Tanzania region, as they join.
- Authorities, where Tanzanian law requires it.
We do not sell personal data.
Where it is kept
datahuru runs in regions: places with servers of their own. Your team chooses a region for each app when it creates it.
- Your account and billing data are stored and processed in our default region: Germany, in Hetzner Online's data centre in Falkenstein. So are the dashboard you manage your apps from, and their logs as you read them there.
- Each app's data, its volumes and databases, is stored in the region chosen for it, and stays there. Today the only region is Germany.
- Backups of the platform's database and of every app's volumes are kept in the European Union, in Cloudflare's storage, whichever region the app is in. They are encrypted as they are stored.
Keeping data in Germany, and backups in the European Union, is a transfer of personal data outside Tanzania, which we make under the safeguards Tanzanian law requires. Servers in Tanzania are joining as a region of their own. When you can choose it, this page will say so; an app's data placed there will be stored in Tanzania, apart from its backups.
How long
- Account and app data: while your account is open, then deleted when it closes.
- Billing records: for as long as Tanzanian tax law requires us to keep them.
- Sign-in links expire within minutes and are single use; sessions end when you sign out, or after 30 days.
Your rights
You can ask to see, correct or delete your personal data, or object to how we use it. See data protection for your rights under Tanzanian law and how to complain. Write to privacy@datahuru.com.