Privacy Policy
Last updated 23 September 2026
Dukuduku is a voice-first social app operated by Zaga ("we", "us"). You can post voice or text, with your name or without it, and listen, react and reply to others. This policy explains what we collect, why, who helps us process it, how long we keep it and what you can do about it. It covers the Android app, the web app at app.dukuduku.co.tz and this website.
1. What we collect
| Data | When | Why |
|---|---|---|
| Your posts: voice recordings, titles, captions, mood tags, and the transcript we generate from your voice | When you publish | To publish and play them, moderate them, and add captions to videos made from them |
| Your activity: likes, comments (text, voice, GIF or emoji), bookmarks, listens and reports you make | When you use those features | To show reactions, rank what is trending, and handle reports |
| Account details: email address or Google account, display name and profile photo | Only if you choose to sign in | So your posts, tokens and settings follow you to another phone |
| Device data: a random device identifier, app version, operating system, push notification token, and IP address in server logs | When you open the app | To keep you signed in, send notifications you allow, prevent abuse, and keep the service working |
| Diagnostics: crash reports, error logs and performance measurements | When something goes wrong or is slow | To find and fix bugs |
| Usage analytics: which screens are opened and which features are used | While you use the app | To understand what works and improve it |
| Purchases: token packages bought, amount, payment method, the phone number used for mobile money, and the payment status | When you buy tokens | To credit your tokens, prevent fraud and meet tax and accounting law |
We do not ask for your location, contacts, or photos from your gallery, and we do not use your microphone except while you are recording.
2. Posting without your name
When you post anonymously, other users see no name, photo or profile attached to it. We still know which device or account a post came from, because we need that to let you delete it, to stop abuse, and to act on reports. We will not reveal who posted something to other users.
We may disclose information where the law requires it, for example a valid order from a Tanzanian court or authority, or where we believe in good faith it is necessary to protect someone from serious harm, including a child. Anything you say inside a recording, such as your name or where you work, is heard by everyone who listens, so leave out details you do not want known.
3. Moderation and automated processing
Every post is reviewed before it appears in the public feed. To help with that, your recording is turned into text by a speech-recognition system running on our own servers. The transcript may then be sent to an AI text service that tidies it into readable sentences and removes personal details such as names and phone numbers before a person reviews it. These steps help people moderate; they do not decide on their own whether your post is published.
4. Who helps us run Dukuduku
We use service providers who process data on our behalf. They are not allowed to use it for their own purposes.
- Hosting and storage: our servers and file storage, where posts and account data are kept.
- Google Firebase: sign-in, push notifications and app analytics.
- Crash and performance monitoring: Sentry and Sentrinel receive error reports and diagnostics.
- AI text processing: tidies transcripts and removes personal details, as described above.
- Payment providers: mobile-money and card payment partners that process token purchases. We never see or store your full card number.
- Advertising: the app can show ads, including optional ads you watch in exchange for tokens, served by Google AdMob. Google may use your device's advertising identifier and collect information under its own policy, described in How Google uses information from sites or apps that use its services. You can reset or delete your advertising ID in your phone's Google settings.
Some of these providers store data outside Tanzania. When that happens we rely on their contractual and security commitments to protect it.
5. What we never do
- We do not sell your personal data, recordings or transcripts.
- We do not show your name on anything you post anonymously.
- We do not use your voice to train anyone else's AI models.
6. Sharing a dukuduku outside the app
If you share a dukuduku as a link or as a video to TikTok, Instagram, WhatsApp or anywhere else, it becomes visible wherever you post it and is then governed by that platform's rules. The video we generate carries the Dukuduku name and captions but no name or profile of the person who recorded it.
7. How long we keep things
- Your posts and comments stay until you delete them or we remove them for breaking the Community Guidelines. A deleted post leaves the app straight away and can no longer be played by anyone.
- The stored audio file of a deleted post is not yet erased automatically. If you want it erased from our servers as well, email hello@dukuduku.co.tz and we will erase it within 30 days.
- Account details are erased as soon as you delete your account (see below).
- Purchase records are kept for as long as Tanzanian tax and accounting law requires.
- Reports and moderation decisions, including reports about child safety, are kept for as long as needed to keep people safe and meet our legal obligations.
8. Your choices and rights
- Delete a post: open it in the app and choose delete.
- Delete your account: see how to delete your account.
- Notifications: turn them off in the app's settings or your phone's settings.
- Access or correction: ask us for a copy of the personal data we hold about you, or to correct it, by emailing hello@dukuduku.co.tz. We reply within 30 days.
9. Security
Data travels between the app and our servers over encrypted connections, and access to production systems is limited to the people who need it. No system is perfectly secure, so if we learn of a breach that affects you, we will tell you and the relevant authorities as the law requires.
10. Age
Dukuduku is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a child is using Dukuduku, tell us at hello@dukuduku.co.tz and we will remove the account and its content. Our Child Safety Standards explain how we handle abuse.
11. Changes
If we change this policy in a way that matters, we will update the date at the top and tell you in the app before the change takes effect.
12. Contact
Zaga, operator of Dukuduku, Tanzania. Privacy questions and requests: hello@dukuduku.co.tz.