Privacy Policy

Last updated: 2026-11-13

Effective Date: November 13, 2026

Last Updated: November 13, 2026

MyBima (the “Company,” “we,” “us,” or “our”) operates bimaplus.co, the Bima+ insurance platform, and provides insurance-business software — lead generation, underwriting support, claims management and customer support — to insurers, brokers and banks in Tanzania. This Privacy Policy explains what personal information we collect through these surfaces, how we use it, and the rights you have.

The website and supporting technology are operated by Mitikaz Company Limited on behalf of MyBima (see the footer of every page for the disclosure).

1. Scope

This policy covers personal information collected through:

  • The bimaplus.co website and its contact form
  • The Bima+ platform
  • Trials of, and subscriptions to, the Bima+ platform

Underlying financial transactions (account opening, deposits, withdrawals, bill payments) are executed by our licensed bank and mobile-money partners. Those partners are independent data controllers for the policies they issue. Their privacy notices apply alongside this one.

2. What we collect

Depending on how you interact with us, we may collect:

  • Contact details — name, phone number, email, business type and any message you send us via the website contact form.
  • Business details — company name, business type (insurer, broker, bank, agent or other), and any information you provide when requesting a trial.
  • KYC (Know Your Customer) information in the course of an insurance transaction — processed on behalf of the licensed insurer that issues the policy.
  • Website usage information — pages visited, referrer, approximate location, browser and device information. Where enabled, this is collected via Google Analytics 4 and/or Cloudflare Web Analytics.

3. How we use it

  • To respond to your enquiry and provide the service you asked for
  • To route Bima+ services to the correct licensed partner and to fulfil KYC/AML obligations
  • To set up and deliver your Bima+ trial or subscription
  • To send you service-related updates (e.g. renewal reminders, claim-status updates)
  • To improve our website and content — always in aggregate, de-identified form

We do not use your information for automated decision-making with legal or similarly significant effects, and we do not sell your personal information.

4. Marketing communications

We may send you newsletters or updates related to Bima+ services when you explicitly opt in (for example, by ticking a box on the contact form or asking on WhatsApp). You can unsubscribe at any time by contacting us at the address in §11.

5. Sharing your information

We share personal information only where necessary to provide the service or comply with the law:

  • Licensed financial partners — for Bima+ services and account opening. Each partner has its own privacy notice.
  • Service providers that host our website (Cloudflare Pages), send our transactional email (Brevo), and support customer messaging (Meta / WhatsApp Business API).
  • Regulators and law enforcement — where compelled by law, court order, or by the rules of an insurance or telecommunications partner.
  • Mitikaz Company Limited — our technology partner, which builds and maintains the Bima+ platform on our behalf — see §1.

We do not transfer personal information outside Tanzania except through providers listed above (Cloudflare, Brevo, Meta), whose infrastructure is global. Those transfers are governed by our contracts with them.

6. Cookies and analytics

The bimaplus.co website uses a small number of cookies and edge-side analytics to keep the site working and to understand how visitors use it. This includes:

  • Cloudflare edge cookies — needed for the site to load; not used for cross-site tracking
  • Google Analytics 4 (when enabled) — pageview and event data with IP anonymisation

Rate-limiting and abuse-prevention on our contact form use short-lived request metadata (IP, user-agent) held at the network edge; that metadata is not stored beyond what is needed to block automated abuse.

7. How long we keep information

  • Contact form messages: retained for as long as they are useful to serve you, and for a maximum of 24 months from your last interaction.
  • Subscription and billing records: retained for 7 years for tax and audit purposes.
  • KYC / AML records tied to an insurance transaction: retained for the period required by law and by the partner institution's own policy (typically at least 7 years).

8. Your rights

Under the Personal Data Protection Act, 2022 (Tanzania) you have the right to:

  • Ask what personal information we hold about you
  • Ask us to correct information that is inaccurate or out of date
  • Ask us to delete information we no longer need to retain
  • Withdraw consent for a use that was based on your consent
  • Object to a use that you consider inappropriate, and to lodge a complaint with the Personal Data Protection Commission of Tanzania

To exercise any of these rights, contact us using the details in §11.

9. Security

We use reasonable administrative, technical and physical safeguards to protect the personal information we collect — including TLS encryption in transit, access control on internal tools, and staff confidentiality obligations. No system is perfectly secure; if you believe your MyBima interaction has been compromised, contact us immediately.

10. Children

Bima+ is a business-to-business product. We do not knowingly collect personal information from a child under 13 through the website.

11. Contact us

For any question about this Privacy Policy — including access, correction, deletion, or a complaint:

MyBima, product of Mitikaz Inc.
Dar es Salaam, Tanzania
Website: contact form

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and, where the change is material, notify you through the Bima+ website.