Last updated: July 2026
When you use VoiceInsights Africa as a respondent, we collect the voice recording and/or text you provide in response to survey questions, along with basic metadata (channel used, timestamp, and — if you provide it — demographic information like gender or age band). When you use the platform as a client organization, we collect account information (name, email, organization) needed to operate your account.
Respondent data is processed to generate transcripts, sentiment analysis, and aggregated insights for the client organization that commissioned the survey. We do not sell respondent data to third parties. Client account data is used solely to operate and bill for the service.
We use contracted service providers to operate the platform. Depending on the channel and configuration selected by the commissioning organization, these may include Cloudflare for application hosting and storage, Twilio for phone, SMS and WhatsApp delivery, OpenAI or Anthropic for configured language and AI processing, and an email delivery provider for transactional notices. These providers process data on our instructions to deliver the service; this is not a sale of respondent data. A project-specific subprocessor and data-transfer schedule should be agreed during enterprise onboarding where required.
Every voice interview begins with a spoken consent request. Data is not collected from a respondent without their consent, and respondents may stop participating at any time. See our Safeguarding & Compliance page for details.
Data is encrypted in transit and at rest, and access is restricted by role. Offline interview payloads are encrypted on the field device and are removed after a confirmed synchronization. Project retention periods, deletion schedules, permitted processing locations and international transfer safeguards must be configured in the client agreement; we do not claim a universal data-residency location for every provider. See our Security page for technical detail.
VoiceInsights Africa Ltd is registered with the Personal Data Protection Commission (PDPC) of Tanzania as a Data Controller, under the Personal Data Protection Act, No. 11 of 2022. We process personal data lawfully, fairly, and only for the specific research purpose it was collected for, in line with the Act's principles. Where we work with international donors or partners, we additionally design our systems in line with globally recognized principles such as GDPR.
If you are a respondent and want data associated with you removed, or if you are a client organization with questions about this policy, contact us at [email protected].
This is a working draft policy for an early-stage platform. If your organization requires a reviewed, jurisdiction-specific privacy policy for procurement purposes, please contact us and we will provide one.