Privacy Policy
Last updated: 12 November 2026
This policy explains what personal data Tuza collects, why, and what we do with it. It applies to streamers and to viewers who send tips. We follow Kenya's Data Protection Act, 2019.
1. What we collect
- Streamers: your handle, display name, email or phone number for sign-in, and payout details.
- Viewers: the payment reference, amount, message and a keyed hash of the phone number used to pay.
- Technical: request logs, including IP address, used for security and abuse prevention.
2. What we do not keep
- We do not store full viewer phone numbers. We store a keyed hash so a streamer can recognise a repeat supporter and so we can rate-limit abuse.
- We do not store card details. Card payments, where offered, are handled entirely by the payment provider.
3. Why we use it
- to process payments and deliver alerts;
- to settle payouts to your wallet or bank;
- to keep the service secure — rate limits, fraud checks, audit logs;
- to provide you with your own earnings records.
4. Who we share it with
- The payment provider, which processes the payment and settles funds. They act as an independent data controller for payment data under their own policy.
- Infrastructure providers that host the service, under contract and only as needed to run it.
- Authorities, where the law requires it.
We do not sell personal data.
5. How long we keep it
Payment and ledger records are kept for as long as required for accounting and legal purposes. Message content attached to a tip is kept with the payment record so it can be audited or shown again in your history.
6. Your rights
Under the Data Protection Act you can ask to see the data we hold about you, ask us to correct it, or ask us to delete it. To do this, email [email protected]. We may need to keep records we are legally required to keep, such as completed transactions.
7. Security
Data is transmitted over TLS and stored in access-controlled databases. Our security rules restrict who can read payment data, and every money change is written to an append-only ledger.
8. Children
The service is for people 18 and older. We do not knowingly collect data from children.
9. Complaints
If you are unhappy with how we handle your data, contact us first. You can also complain to the Office of the Data Protection Commissioner in Kenya.