Privacy Policy

Account information: your name, email address, phone number, and a password. We never store the password itself — only a one-way hash of it, which cannot be turned back into your password.

Optional profile information: a profile picture and a short bio, if you choose to add them.

Booking information: the trips you book, number of travelers, and your booking history.

Payment information: when you pay by mobile money, you give us the transaction reference from the message your network sent you, so we can match your payment to your booking. We never see or store your PIN, and the money goes straight to our own mobile money account — this site never holds it. Card payment is not available at the moment.

Content you post: messages in a trip's Trip Community, reviews you leave, support messages, and trip proposals you submit.

Bookings we record for you: if you pay us directly outside the app (cash, or a mobile money transfer straight to our Lipa Namba), we enter your name, phone number and booking details ourselves so your booking is recorded the same as one you made online.

Push notification data: if you turn on push notifications, we store a subscription specific to that device (an address and encryption keys, not readable as personal content) so we can deliver notifications to it even when We Travel Tz is not open. Turning notifications off removes this.

Two-factor authentication: if an agent or admin account turns on two-factor authentication, we store an encrypted secret used to check the codes from their authenticator app at login.

Technical error data: when something goes wrong in the app, a bug-tracking tool (Sentry) automatically records what happened (e.g. which page, what error) so we can fix it — this does not include your personal browsing habits.

• To create and manage your account.
• To process your bookings and payments.
• To send booking confirmations, departure reminders, and other notifications.
• To connect you with your travel agent through Trip Communities.
• To respond to support requests.
• To find and fix bugs, and keep the app secure.

We use a small number of outside companies to run this service. Each one sees only what it needs to do its job:

• Supabase — stores the database: your account, bookings and messages. Its servers are in Ireland.
• Render — runs this website. Its servers are in Germany.
• Resend — sends our emails, including your verification and password reset codes. It handles your email address.
• Cloudinary — stores photos and videos uploaded to the site.
• Cloudflare Turnstile — checks that a real person, not an automated script, is signing up. It sees your IP address and browser details at that moment.
• Sentry — tells us when the app breaks. It sees technical crash reports, not a record of what you browsed.
• Apple and Google — if you turn on notifications, their push services deliver them to your device. They carry the notification, which is only a short title and a prompt to open the app.

We Travel Tz staff — we can see your account details and your bookings, because we are the ones arranging your trip.

We do not sell your personal information to anyone, and we do not share it for advertising.

We Travel Tz does not use advertising or tracking cookies.

The cookies this site does set are the ones that make signing in work: a secure session cookie that keeps you logged in, and two small security cookies that protect the sign-in form itself. They are set by this site, cannot be read by JavaScript, and are only sent over an encrypted connection.

Cloudflare may also set a cookie of its own while checking that a real person is signing up. That is part of the anti-bot check on the signup form and nothing else.

We Travel Tz is a Tanzanian business, and the trips are here. The computers that run the website and store the database are not: the database is in Ireland and the website runs from Germany, both with the companies named in Section 3. This is normal for a service of this size — a Tanzanian data centre is not part of what these providers offer — but you are entitled to know it, so we are telling you plainly.

Your information is encrypted in transit between your device and those servers. We ask each provider for no more access than the job requires.

• Update your name, bio, or profile picture at any time from My Profile.
• Change your password at any time from Change Password.
• Turn push notifications on or off at any time from Notifications in the menu.
• Agent and admin accounts can turn on two-factor authentication for extra login security from Two-Factor Authentication in the menu.
• Permanently delete your account (travellers) from Delete Account in the menu. When you do, your name, email, phone number, and photo are permanently removed and your email becomes free to sign up again with — even by someone else. Your past bookings stay on record without your name attached, so that trip history, reviews, and our agent's records stay accurate; there is no way to undo a deletion.

Passwords are never stored in plain text — only a one-way encrypted hash. Sensitive actions (deleting your account, changing your password) require re-entering your current password first. We rate-limit login and signup attempts to make it harder for anyone to guess your password.

We Travel Tz is not intended for anyone under 18 to use on their own. A trip for a minor should be booked by a parent or guardian.

If this policy changes in a meaningful way, we will update the “Last updated” date at the top of this page.

Questions about your data, or want a copy of what we hold about you? Reach us through the Contact Us page, or directly:

• We Travel Tanzania
• Dar es Salaam
• stevenjulius1906@gmail.com
• +255683308061