Privacy Policy & Data Safety
United African University of Tanzania · UAUT Connect System
Last Updated: September 2026 · Complies with Tanzania PDPA 2022 & Global App Guidelines
1. Institutional Scope & Lawful Basis (PDPA 2022)
UAUT Connect is the official student admission, campus guidance, and ambassador portal of the United African University of Tanzania (UAUT), situated in Vijibweni Ward, Kigamboni, Dar es Salaam. We process personal data under Section 22 of the Tanzania Personal Data Protection Act, 2022 (Act No. 11 of 2022) based on your explicit consent, for legitimate academic admission inquiries, and to facilitate enrollment into university degree programs.
2. Personal Information We Collect
When interacting with UAUT Connect (via web, PWA, or registration forms), we collect:
- Full Legal Name: Used to verify prospective student records and match applicants with university admissions.
- Tanzanian Phone Number (+255): Used to send SMS admissions notices, WhatsApp counseling, and connect applicants with peer ambassadors.
- Email Address: Official channel to deliver formal joining instructions, course prospectuses, and verification emails.
- Academic Preferences: Selected academic programs (e.g. CEIT, BIT, BBA) to prepare entry requirement evaluations.
- Referral Code & Metadata: Attribution tags linking applicant enrollment with student ambassador recognition and awards.
3. Financial Verification & Lipa Namba (Zero PIN Storage)
For application verification or fee consultation, any mobile money references (M-Pesa, Tigo Pesa, Airtel Money, Halopesa) or bank slip transaction numbers are recorded strictly for reconciliation with the UAUT Accounts Office. UAUT Connect NEVER collects, requests, or stores your secret PIN, mobile money password, or bank card security code (CVV).
4. Voice Processing & Campus AI Assistant
If you utilize voice inputs with our interactive AI Campus Assistant, audio is processed ephemerally on-device or streamed securely over TLS encryption solely to transcribe your academic questions. We do not sell user queries to marketing aggregators, nor do we use private conversations to train unauthorized public models.
5. Geolocation & Campus Directions
Location permissions (if granted in your browser) are solely utilized to provide interactive directions from your current location to the UAUT Campus in Kigamboni, Dar es Salaam. We do not track continuous background GPS or share real-time location histories with third parties.
6. Security Infrastructure & Cloudflare Protection
UAUT Connect is secured by Cloudflare Enterprise Edge & Web Application Firewall (WAF), enforcing TLS 1.3 HTTPS end-to-end encryption, automated DDoS mitigation, and bot verification. Data storage in Firebase Firestore adheres to strict institutional access rules. System telemetry and crash diagnostics are monitored to ensure uninterrupted service for Tanzanian higher education applicants.
7. Your Rights Under Tanzania PDPA 2022 (Part V)
Under the Tanzania Personal Data Protection Act, 2022, every applicant and student enjoys the following statutory rights:
• Right of Access
Request a copy of all personal records held in our admissions system.
• Right to Rectification
Correct inaccurate phone numbers, names, or educational choices.
• Right to Erasure (Section 33)
Demand permanent deletion of your inquiry, ambassador account, or profile.
• Right to Restrict Processing
Opt out of automated notifications or marketing communications.
8. In-App Account Deletion & Permanent Data Erasure
In compliance with Google Play & Apple App Store Guidelines and Section 33 of Tanzania PDPA 2022, you are entitled to permanently delete your account, cancel prospective inquiries, and revoke consent. When you request erasure, our Data Protection Officer will permanently purge your phone number, email, and inquiry records from active databases within 30 days.
9. Data Protection Officer (DPO) & Contact Information
If you have questions regarding this Privacy Policy, wish to exercise your statutory data subject rights, or lodge an inquiry under the Tanzania Personal Data Protection Commission (PDPC), please contact our designated Data Protection Officer: