TiketiGala ("TiketiGala", "we", "us", or "our") provides a bus-ticketing platform
made up of a mobile app used by bus-company staff and agents, a web-based
administration dashboard used by bus-company management, and the backend
services that connect them (together, the "Service"). This Privacy Policy
explains what information we collect, how we use it, and the choices you have.
By using the Service, you agree to the collection and use of information as
described in this policy. If you do not agree, please do not use the Service.
1. Who this policy applies to
The Service is used by two broad groups of people:
- Agents and administrators — employees of a bus company who
are given a login to sell tickets, manage routes and schedules, or administer
their company's account.
- Passengers — individuals whose name, phone number, and
travel details are recorded on a ticket when an agent books a trip for them,
or who book directly where a company offers online/self-service booking.
Each bus company using TiketiGala ("Operator") is the party a passenger books
travel with. TiketiGala is the technology provider that Operators use to run
their ticketing operations.
2. Information we collect
Account information (agents & admins)
- Full name, username, phone number, and role (agent or admin)
- The Operator (company), branch, and office an account belongs to
- Login credentials (passwords are stored using one-way hashing — we cannot
see your actual password)
- Permissions and activity relevant to the account (e.g. routes you're
allowed to book, whether you can cancel tickets)
Passenger & booking information
- Passenger full name and phone number
- Optional details an Operator may collect: age, gender, national ID number
- Trip details: origin, destination, travel date, seat number, boarding and
drop-off points
- Fare, payment method, and ticket reference/QR code
- Cancellation reason and refund details, if a ticket is cancelled
Communications
- We send SMS text messages to the phone number on a booking to confirm
ticket details (route, seat, date, and reference number)
- We send SMS text messages to a newly created agent/admin account with their
username and a temporary password
Technical & usage information
- Basic device and app information needed to operate the Service (e.g. app
version), and standard server logs (timestamps, request type) used for
security and troubleshooting
We do not collect precise device location, contacts, photos, or
microphone/camera data, except that the app may request camera access solely
to scan a ticket's QR code when explicitly used for that purpose.
3. How we use information
- To create and issue bus tickets, and to let passengers and Operators verify
them (including by printed ticket or QR code)
- To send booking-confirmation and account-credential SMS messages
- To let Operators manage their routes, buses, schedules, staff, and sales
reporting
- To process cancellations and refunds according to an Operator's policy
- To detect and prevent double-booking, fraud, and misuse of the Service
- To meet regulatory reporting obligations — for Operators enrolled in
Tanzania's LATRA Universal Ticketing System (UTS), certain trip and
reservation data is shared with LATRA as required by law (see Section 4)
- To provide customer support and respond to enquiries
4. How we share information
We do not sell personal information. We share information only as follows:
- With the relevant Operator — a passenger's booking
information is naturally visible to the bus company the ticket was booked
with, and to the agent/staff who need it to provide the service.
- SMS gateway provider — we use a third-party SMS delivery
service to send the text messages described above. The message content
(e.g. phone number, name, ticket details) is shared with that provider only
to the extent needed to deliver the message.
- LATRA (Land Transport Regulatory Authority) — where an
Operator participates in LATRA's Universal Ticketing System, relevant trip,
schedule, and reservation data is exchanged with LATRA's systems as part of
Tanzania's national transport-ticketing regulatory framework.
- Legal requirements — if required to do so by law, or to
protect the rights, property, or safety of TiketiGala, our users, or others.
5. Data retention
We keep account and booking information for as long as the related account or
Operator remains active, and afterwards for as long as reasonably necessary to
meet accounting, regulatory, and dispute-resolution obligations, after which it
is deleted or anonymised.
6. Security
We use industry-standard measures to protect information, including encrypted
connections (HTTPS), hashed passwords, and token-based authentication with
limited-lifetime access tokens. No system is 100% secure, and we cannot
guarantee absolute security.
7. Your choices and rights
You may ask us to access, correct, or delete personal information we hold about
you, subject to legal and legitimate business limits (for example, we may need
to keep ticket records for accounting or regulatory purposes). To make a
request, contact us using the details in Section 10.
8. Children's privacy
The Service is not directed at children, and agent/admin accounts are intended
for adults. A ticket may of course be booked on behalf of a minor passenger by
an adult (e.g. a parent or an agent), in which case only the minimal travel
details necessary to issue the ticket are recorded.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will update the "Last
updated" date above when we do. Continued use of the Service after a change
means you accept the revised policy.
10. Contact us
Questions about this Privacy Policy or your information can be sent to: