Privacy Policy
01 Who is responsible for your data
For this website, Dr. Moses Kayungi, operating as AI Moses, based in Mafinga, Iringa, Tanzania, is the data controller — the person responsible for deciding how your information is used. Contact details are at the bottom of this page.
02 What I collect
This site is intentionally light on data collection. Here's exactly what's gathered:
| When | What's collected | Why |
|---|---|---|
| You message me on WhatsApp | Your phone number, name (if shared), and message content | To reply to your enquiry and discuss a project |
| You email me | Your email address, name, and message content | To reply to your enquiry |
| You browse the site | Standard technical data your browser sends to any website (e.g. device/browser type, approximate location from IP) | Only as automatically logged by hosting infrastructure — not used for tracking or profiling |
This portfolio site does not use advertising trackers, and does not run analytics cookies beyond what's strictly necessary for the page to load and function.
03 How your information is used
- To respond to your enquiry and discuss a potential project;
- To deliver a commissioned project, including invoicing and communicating progress;
- To keep basic records of past client work for reference and portfolio purposes (with client names shown only where already public or agreed).
Your information is never sold. It is not shared with advertisers.
04 Legal basis for processing
Under Tanzania's Personal Data Protection Act, No. 11 of 2022, information you send me via WhatsApp or email is processed on the basis of your consent (you chose to contact me) and, where a project proceeds, to perform the agreement between us.
05 Third-party services
This site and the products linked from it are built and hosted using third-party infrastructure, including:
- Lovable — hosting for several of the standalone product apps listed in the portfolio;
- Supabase — backend/database infrastructure used by some products;
- WhatsApp Business (Meta) — for direct client messaging;
- Google Fonts — for the typefaces used on this page, which may load from Google's servers.
Each of these providers has its own privacy policy governing how they handle data on their platforms. I choose providers with reasonable security practices, but I don't control their infrastructure directly.
06 Individual product privacy
Standalone products (RadAssist, Exam Master CMT, SmartElimu Game, and others linked from this portfolio) may collect additional information specific to their function — for example, exam answers for progress tracking, or images uploaded for an AI second-read. Where that's the case, the product itself will explain what's collected at the point of use. This portfolio page's policy covers the portfolio site itself and my direct contact channels.
07 Children's privacy
08 Data security
I take reasonable technical and organizational steps to protect information sent to me — including using reputable hosting providers and not storing sensitive information longer than needed. No method of transmission over the internet is 100% secure, so while I work to protect your information, I can't guarantee absolute security.
09 How long information is kept
Enquiry messages and project communications are kept for as long as reasonably useful for ongoing support, reference, or accounting purposes, and deleted or anonymized when no longer needed. You can ask me to delete your information at any time — see "Your rights" below.
10 International data transfer
Some third-party infrastructure I use (such as Lovable and Supabase) may store or process data outside Tanzania. Where that happens, it's handled by that provider's own security and compliance measures. If you have concerns about a specific product's data location, ask me and I'll tell you what I know about that product's hosting.
11 Your rights
Under Tanzania's Personal Data Protection Act, you have the right to:
- Ask what personal information I hold about you;
- Ask me to correct inaccurate information;
- Ask me to delete your information, where I'm not required to keep it for a legitimate reason (e.g. an active project or legal obligation);
- Withdraw consent for future contact at any time — just tell me on WhatsApp or email.
To exercise any of these, contact me directly using the details below. If you believe your rights under Tanzanian law haven't been respected, you may also raise it with the Personal Data Protection Commission (PDPC), Tanzania's data protection regulator.
12 Changes to this policy
I may update this policy as the site and products evolve. The "Last updated" date at the top reflects the latest revision. Significant changes will be reflected here; I encourage checking back occasionally.
13 Contact
Questions about this policy, or a request relating to your data, are welcome any time.