Privacy Policy - SOMA Mobile App

Last updated: July 21, 2026

1. Introduction

The SOMA Mobile App ("App") is a secure mobile application that enables members of Savings and Credit Cooperative Societies (SACCOS) to access financial services through the SOMA SACCOS Management System. This Privacy Policy explains how user data is collected, used, stored, and protected when using the App.

By using the SOMA Mobile App, you agree to the practices described in this Privacy Policy.

2. Information We Collect

We collect only data that is necessary to deliver SACCOS financial services securely and efficiently.

2.1 Personal Information
  • Full name
  • Mobile phone number
  • SACCOS membership details
  • Unique user identifiers linked to the SOMA System
2.2 Financial Information
  • Account balances (savings, loans, shares, deposits)
  • Transaction history and statements
  • Loan details, repayments, and contributions
2.3 Authentication & Security Data
  • PIN (encrypted and never stored in plain text)
  • One-Time Passwords (OTP) sent via SMS or WhatsApp
  • Login timestamps and device session data
2.4 Device & Usage Information
  • Device type and operating system
  • App usage logs for security, audit, and troubleshooting
3. How We Use Information

Collected information is used strictly for:

  • Secure user authentication (PIN + OTP)
  • Displaying account summaries and statements
  • Processing payments (LUKU, GePG, airtime, mobile money transfers)
  • Enabling multi-SACCOS account access
  • Fraud prevention, audit trails, and regulatory compliance
  • Improving system performance and user experience
4. Data Sharing and Disclosure

We do not sell or rent user data.

Information may only be shared:

  • With the user's registered SACCOS
  • With regulated payment service providers required to complete transactions
  • When required by Tanzanian law or regulatory authorities

All third parties are required to maintain appropriate data protection standards.

5. Data Storage and Security
  • All data is stored securely within the SOMA System infrastructure
  • Data is protected using encryption, access controls, and audit logging
  • Two-Factor Authentication (2FA) is enforced for all sensitive operations

We continuously monitor and update security controls to protect against unauthorized access.

6. User Rights and Choices

Users have the right to:

  • Access their personal and financial information
  • Request correction of inaccurate data
  • Change PIN credentials
  • Request account deactivation through their SACCOS

Certain financial records may be retained to comply with legal and audit requirements.

7. Children's Privacy

The SOMA Mobile App is intended for registered SACCOS members only. It is not designed for children under the age of 18, and we do not knowingly collect data from minors.

8. Data Retention

User data is retained only for as long as necessary to:

  • Provide services
  • Meet financial, audit, and regulatory obligations

When no longer required, data is securely archived or deleted.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any changes will be communicated through the App or official SACCOS communication channels.

Continued use of the App after updates constitutes acceptance of the revised policy.

10. Contact Information

For privacy-related inquiries, please contact your respective SACCOS or the SOMA System administrator through official support channels.