Privacy policy

Last updated: 25 September 2026

This policy explains how LuchamSkonga, operated by Lucham Digital Agency Limited ("we"), handles personal data. LuchamSkonga is used by schools in Tanzania, and we aim to comply with the Personal Data Protection Act, 2022.

1. Who is responsible for the data

Each school decides what information about its students, parents and staff is recorded in LuchamSkonga; for that information the school is the data controller and we process it on the school's behalf. For information about people who contact us, request a demo or register a school, and for account and billing information of schools, we are the data controller.

2. What we collect

• School and account information: school name, contact person, email, phone, region, number of students, and user names, emails, phone numbers and roles.
• Records entered by the school: student details, guardians, classes, attendance, results, fees and payments, timetables, transport assignments and boarding records, homework and announcements.
• Payments: payment amounts, references and status returned by our payment provider. We do not store card numbers or mobile money PINs.
• Technical information: IP address, device and browser information, and security logs of sensitive actions.

3. How we use it

• To provide LuchamSkonga to schools and their authorised users.
• To review school registrations, create accounts and send activation and password-reset links.
• To send notifications the school has enabled (for example absence, fee or transport alerts) by SMS, email or in-app message.
• To bill schools for their subscription and to process school fee payments.
• To keep the service secure, investigate misuse and meet legal obligations.

We do not sell personal data and we do not use students' data for advertising.

4. Children's information

Student information is entered and controlled by the school. Within LuchamSkonga, parents see only their own linked children, students see only their own records and teachers see only the classes they are assigned to. Student photos, locations from school transport, and credential documents are available only to authorised users of that school.

5. Who we share data with

• Payment provider (Pesapal) to process subscription and school fee payments.
• SMS provider (MoSMS) to deliver text messages enabled by the school.
• Hosting and email providers that run our servers and send our emails.
• Authorities where the law requires it.

6. Security

Each school's data is kept separate from other schools. Access is limited by role, passwords are stored in hashed form, activation and reset links are single-use and expire, connections use HTTPS, and sensitive actions are recorded in an audit log.

7. How long we keep data

We keep school records for as long as the school uses LuchamSkonga. If a subscription ends, the account becomes read-only and records are not deleted automatically. A school can ask us to export or delete its data when it leaves the service, subject to records we must keep by law (for example billing records).

8. Your rights

You may ask to access, correct or delete your personal data, or object to certain uses. Parents and students should contact their school first, because the school controls those records; we will help the school respond. You can contact us at the email below.

9. Contact

Lucham Digital Agency Limited — support@lucham.co.tz, +255 712 670 431.

We may update this policy; the date at the top shows the latest version.