TiketiGala ("TiketiGala", "we", "us", or "our") provides a bus-ticketing platform made up of a mobile app used by bus-company staff and agents, a web-based administration dashboard used by bus-company management, and the backend services that connect them (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.
1. Who this policy applies to
The Service is used by two broad groups of people:
- Agents and administrators — employees of a bus company who are given a login to sell tickets, manage routes and schedules, or administer their company's account.
- Passengers — individuals whose name, phone number, and travel details are recorded on a ticket when an agent books a trip for them, or who book directly where a company offers online/self-service booking.
Each bus company using TiketiGala ("Operator") is the party a passenger books travel with. TiketiGala is the technology provider that Operators use to run their ticketing operations.
2. Information we collect
Account information (agents & admins)
- Full name, username, phone number, and role (agent or admin)
- The Operator (company), branch, and office an account belongs to
- Login credentials (passwords are stored using one-way hashing — we cannot see your actual password)
- Permissions and activity relevant to the account (e.g. routes you're allowed to book, whether you can cancel tickets)
Passenger & booking information
- Passenger full name and phone number
- Optional details an Operator may collect: age, gender, national ID number
- Trip details: origin, destination, travel date, seat number, boarding and drop-off points
- Fare, payment method, and ticket reference/QR code
- Cancellation reason and refund details, if a ticket is cancelled
Communications
- We send SMS text messages to the phone number on a booking to confirm ticket details (route, seat, date, and reference number)
- We send SMS text messages to a newly created agent/admin account with their username and a temporary password
Technical & usage information
- Basic device and app information needed to operate the Service (e.g. app version), and standard server logs (timestamps, request type) used for security and troubleshooting
We do not collect precise device location, contacts, photos, or microphone/camera data, except that the app may request camera access solely to scan a ticket's QR code when explicitly used for that purpose.
3. How we use information
- To create and issue bus tickets, and to let passengers and Operators verify them (including by printed ticket or QR code)
- To send booking-confirmation and account-credential SMS messages
- To let Operators manage their routes, buses, schedules, staff, and sales reporting
- To process cancellations and refunds according to an Operator's policy
- To detect and prevent double-booking, fraud, and misuse of the Service
- To meet regulatory reporting obligations — for Operators enrolled in Tanzania's LATRA Universal Ticketing System (UTS), certain trip and reservation data is shared with LATRA as required by law (see Section 4)
- To provide customer support and respond to enquiries
4. How we share information
We do not sell personal information. We share information only as follows:
- With the relevant Operator — a passenger's booking information is naturally visible to the bus company the ticket was booked with, and to the agent/staff who need it to provide the service.
- SMS gateway provider — we use a third-party SMS delivery service to send the text messages described above. The message content (e.g. phone number, name, ticket details) is shared with that provider only to the extent needed to deliver the message.
- LATRA (Land Transport Regulatory Authority) — where an Operator participates in LATRA's Universal Ticketing System, relevant trip, schedule, and reservation data is exchanged with LATRA's systems as part of Tanzania's national transport-ticketing regulatory framework.
- Legal requirements — if required to do so by law, or to protect the rights, property, or safety of TiketiGala, our users, or others.
5. Data retention
We keep account and booking information for as long as the related account or Operator remains active, and afterwards for as long as reasonably necessary to meet accounting, regulatory, and dispute-resolution obligations, after which it is deleted or anonymised.
6. Security
We use industry-standard measures to protect information, including encrypted connections (HTTPS), hashed passwords, and token-based authentication with limited-lifetime access tokens. No system is 100% secure, and we cannot guarantee absolute security.
7. Your choices and rights
You may ask us to access, correct, or delete personal information we hold about you, subject to legal and legitimate business limits (for example, we may need to keep ticket records for accounting or regulatory purposes). To make a request, contact us using the details in Section 10.
8. Children's privacy
The Service is not directed at children, and agent/admin accounts are intended for adults. A ticket may of course be booked on behalf of a minor passenger by an adult (e.g. a parent or an agent), in which case only the minimal travel details necessary to issue the ticket are recorded.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do. Continued use of the Service after a change means you accept the revised policy.
10. Contact us
Questions about this Privacy Policy or your information can be sent to:
- Email: support@paygala.co