Privacy Policy

Version 1.1 · Effective 26 September 2026

1. Who We Are

AnKara is an invoicing platform for Tanzanian businesses, operated by Barah Technologies Ltd ("AnKara", "we", "us"). This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we keep it and the choices you have, whether you are a Business User who sends invoices through AnKara or an Invoice Recipient who receives one. It is a plain-language companion to AnKara's Data Protection Policy, which sets out our formal obligations under the Personal Data Protection Act, Cap. 44 (the "Act").

2. What Information We Collect

2.1 If you are a Business User

2.2 If you are an Invoice Recipient

We process the name, email address and WhatsApp/phone number that a Business User enters when creating an invoice addressed to you, together with the invoice contents (items, quantities, amounts, tax, due dates and payment details). We receive this information from the Business User, not from you directly.

2.3 Technical data

Our servers and service providers automatically record limited technical data, such as IP addresses, request times and error logs, needed to run and secure the service. AnKara does not use advertising trackers and does not sell usage data.

3. How We Use Your Information

We do not use Invoice Recipient data for marketing, and we do not sell personal data.

4. Who We Share Information With

We share personal data only with the service providers we need to run AnKara. Each is bound to process it only on our instructions:

Invoices are delivered to the recipients a Business User chooses. We may also disclose personal data where required by law or by a lawful request from a competent Tanzanian authority.

5. Where Your Data Is Stored

Account and business data is stored in our database in Frankfurt, Germany, and some of our service providers operate from France, the United States and elsewhere, so personal data is transferred outside Tanzania. We make these transfers only where they are necessary to provide the service, to providers bound by data protection commitments, and in line with Sections 31 and 32 of the Act. Your business profile and invoices are also kept on your own device so the app can load them quickly.

6. Important: AnKara Invoices Are Not TRA Fiscal Receipts

Invoices generated through AnKara are business billing documents, not fiscal receipts issued under the Tanzania Revenue Authority's Electronic Fiscal Device system. If you need a fiscal receipt for tax purposes, please ask the issuing business directly.

7. How Long We Keep Your Data

8. Deleting Your Account

You can delete your AnKara account at any time:

Deleting your account immediately signs you out, stops all recurring invoices and reminders, and permanently deletes your account, business profile, logo, clients and invoices. Subscription payment records are kept in anonymised form as described in Section 7. Deletion cannot be undone, so please save or share any invoices you need for your own records first. Deleting your account does not entitle you to a refund of any unused subscription period.

9. Your Rights

Under the Act you have the right to know whether we hold personal data about you and to receive a copy of it; to have inaccurate data corrected; to have data deleted; to object to processing, including for direct marketing; and to withdraw any consent you have given, including consent to process payment data, at any time without affecting processing already carried out.

To exercise any of these rights, email privacy@invoice-ankara.com. We respond within 14 days. If you are an Invoice Recipient, the business that sent you the invoice decides how your data is used; you can contact that business directly, or contact us and we will pass your request to them and help them respond. You can also complain to the Personal Data Protection Commission.

10. Consent for Payment Data

Payment and financial transaction data is sensitive personal data under Tanzanian law. Before you make a payment in the app, we ask you to tick a separate consent box, distinct from accepting our Terms of Service, allowing us to process your payment data. The box is never ticked for you, and we keep a record of when you gave consent.

11. How We Protect Your Data

We use encrypted (HTTPS/TLS) connections, hashed passwords, separation of each business's records so they can only be reached through that business's own account, restricted access to production systems, and secure storage of the keys we use to connect to our service providers. No system is perfectly secure; if a breach affects your personal data, we will notify the Personal Data Protection Commission and, where required, you.

12. Children

AnKara is intended for business owners and staff aged 18 or over and is not directed at children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The version number and effective date at the top show when it last changed, and we will tell you about significant changes through the app or by email.

14. Contact Us

Data controller: Barah Technologies Ltd (operator of AnKara)

Data Protection Officer: Joshua Calvin Maimu

Email: privacy@invoice-ankara.com

Website: https://invoice-ankara.com

Invoice emails are sent from invoices@invoice-ankara.com. We will never ask for your mobile money PIN or your password by email or WhatsApp.

You can also contact the Personal Data Protection Commission directly if you have concerns about how your data is handled that we have not resolved to your satisfaction.