Privacy Policy

Last updated: May 21, 2026

Kidokezo: Sera hii inaeleza jinsi Host Bora inavyokusanya na kutumia taarifa zako. Kwa maswali, wasiliana nasi kwa barua pepe hapa chini.

This Privacy Policy explains how Host Bora (“Host Bora”, “we”, “us”, or “our”) collects, uses, stores, and shares information when you use our mobile application, website, and related services (together, the “Services”). By using the Services, you acknowledge this policy. If you do not agree, please do not use the Services.

Who we are

Host Bora is a property-management application for short-term rental and hospitality hosts. For the purposes of applicable data-protection laws, Host Bora is the data controller responsible for personal information processed through the Services, unless we tell you otherwise for a specific feature.

Our Services are designed for hosts operating in Tanzania and similar markets. Where local law applies (including Tanzania’s personal data protection framework where relevant), we aim to process information lawfully, fairly, and transparently.

What information we collect

Depending on how you use Host Bora, we may collect the following categories of information:

Account and profile: Name, email address, phone number, password or authentication tokens, language preferences, notification settings, and other details you provide when you register or update your profile.
Property and listing data: Property names, addresses, unit details, photos, descriptions, pricing, amenities, occupancy settings, and operational notes you enter for your listings.
Bookings, guests, and tenants: Reservation dates, guest or tenant names, contact details, check-in and check-out information, booking status, notes, and related operational records you maintain in the app.
Payments and finances: Payment amounts, dates, methods, references, income and expense records, and summaries you record for your properties. We do not store full payment-card numbers; card processing, if offered, is handled by payment providers under their own terms.
Documents and vault content: Scanned or uploaded documents (for example leases, IDs, receipts, or contracts), file metadata, and labels you assign in document or vault features.
Calendar and channel sync: Calendar subscription URLs, sync settings, and booking-related data imported from or exported to external calendars or online travel agencies (OTAs) when you connect those integrations.
Smart access and devices: If you connect compatible smart locks or access devices (for example via Tuya or similar integrations), we may process device identifiers, lock status, access events, entry logs, and credentials needed to operate those features at your direction.
Camera, photos, and media: Images you capture or select for listings, document scanning, design moodboards, or attachments. See Camera and media below.
Usage and technical data: App version, device type, operating system, approximate location (for example when you pick a map pin), IP address, crash reports, diagnostics, and feature usage needed to operate and improve the Services.
Communications: Messages you send to support and records of your requests or feedback.

You are responsible for ensuring you have a lawful basis to enter guest, tenant, staff, or third-party personal information into Host Bora (for example consent, contract, or legitimate interest under applicable law).

How we use your information

We use information to:

Provide, maintain, and secure the Services, including account login and syncing your data across devices.
Let you manage properties, units, bookings, payments, expenses, tasks, documents, and host workflows.
Sync calendars and bookings with services you connect, and display operational dashboards and reports.
Operate smart-access features you enable, including generating or revoking access where supported.
Send service-related notifications (for example booking reminders or account alerts) according to your settings.
Respond to support requests, troubleshoot issues, and protect against fraud, abuse, or security incidents.
Analyse aggregated or de-identified usage to improve reliability and features.
Comply with legal obligations and enforce our terms.

We do not sell your personal information.

Legal basis and consent

Where data-protection law requires a legal basis, we rely on one or more of the following, depending on context:

Contract: Processing needed to provide the Services you sign up for.
Legitimate interests: Operating, securing, and improving Host Bora in ways that do not override your rights (for example fraud prevention or service analytics).
Consent: Where required—for example optional marketing, certain device permissions, or connecting third-party integrations. You may withdraw consent through device or in-app settings where available.
Legal obligation: When we must retain or disclose information to comply with law or valid requests from authorities.

If you are in Tanzania or another jurisdiction with specific data-protection rules, you may have additional rights described under Your rights. This policy is intended to be understandable and practical for hosts in our primary markets; it is not legal advice.

We share information only as needed to run the Services:

Service providers: Hosting, cloud storage, authentication, analytics, crash reporting, push notifications, mapping, payment processors, and similar vendors that process data on our instructions and under contractual safeguards.
Integrations you choose: OTAs, calendar providers, smart-lock platforms (such as Tuya where enabled), or design tools when you connect an account or paste a calendar URL. Those parties receive only what is necessary for the integration and are governed by their own privacy policies.
Other users you authorise: Staff, co-hosts, or collaborators if you grant access within your account or property workspace.
Legal and safety: When required by law, court order, or to protect rights, safety, and security of users, Host Bora, or others.
Business transfers: In connection with a merger, acquisition, or sale of assets, subject to appropriate confidentiality commitments.

We do not share your listing photos, documents, or guest lists with advertisers for their independent marketing purposes.

Storage, local data, and security

Host Bora is built for day-to-day host operations, including periods without reliable connectivity. The app may store certain data locally on your device (for example cached properties, bookings, or documents) so you can continue working offline. When you are online, data may sync to our servers or your configured backend so it is available across devices and backed up per your account.

We use administrative, technical, and organisational measures designed to protect information, including encryption in transit where supported, access controls, and monitoring for abuse. No method of transmission or storage is completely secure; you should protect your device and account credentials.

How long we keep information

We retain personal information for as long as your account is active or as needed to provide the Services, resolve disputes, enforce agreements, and meet legal requirements. You may delete certain content in the app where deletion is offered. When you close your account or request deletion, we will delete or anonymise information within a reasonable period, except where we must keep copies for legal, security, or backup purposes for a limited time.

Camera and media

Camera access is requested only when you use a feature that needs it (for example capturing listing photos or scanning documents).

Images may be stored temporarily on your device while you review or crop them.
When you save content to your account, images and scans may be uploaded to servers we or our providers operate.
System sharing (for example the share sheet) occurs only when you explicitly choose to share.

We do not use the camera in the background for unrelated purposes or continuous recording.

Third-party services and SDKs

Depending on your app version and settings, third parties may receive limited technical or usage data, for example:

Google Firebase — analytics, crash reporting, and push messaging (app and device identifiers, usage events, crash diagnostics).
Maps and location — when you select a property location on a map.
Tuya or similar — when you pair smart locks or access hardware.
Platform APIs — camera, photo library, notifications, and secure storage provided by your device operating system.

These providers process data under their own policies as well as our instructions where they act as processors.

Your rights and choices

Subject to applicable law, you may have the right to:

Access personal information we hold about you.
Correct inaccurate or incomplete information.
Request deletion of your account or certain data.
Object to or restrict certain processing.
Withdraw consent where processing is based on consent.
Lodge a complaint with a data-protection authority in your country, where one exists.

You can update many details in the app settings, deny device permissions in your phone settings (some features may not work without them), and uninstall the app at any time. To exercise rights or ask questions, contact us using the details below. We may need to verify your identity before responding.

Children

Host Bora is intended for hosts and business users, not children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may also be communicated in the app or by email where appropriate. Continued use of the Services after changes take effect means you accept the updated policy.

Contact us

For privacy questions, access or deletion requests, or concerns about this policy:

Privacy: privacy@hostbora.co.tz
Support: support@hostbora.co.tz
WhatsApp: Chat with us

You can also reach us through the Contact section on our website.