Privacy and anonymity

Salaries and rates. Your entry is published with a job title or deliverable, employer or client type, and amount. Your name, email and handle are stored separately and never shown, exported or sold. You can edit or delete an entry from your account until our team has reviewed and approved it; after that, contact us to change or remove it.

Tool results you email yourself. When you email yourself a result, we store the calculation with your account so the link in the email can reopen it. You can delete your account and it goes with it.

Verification. If you confirm a work email we keep only the domain (for example company.co.tz). If you upload a payslip, a letter or a student ID, we keep the document in private storage for as long as your account exists, so that a verification can be checked later. Only Mshahara staff (administrators and moderators) can open it, and every opening is logged. It is deleted with your account; to have it removed sooner, contact us. Creators who use a bio code: we check the profile once and store nothing from it.

Relationships. Relationships is optional and stays off until you switch it on; it is open only to members whose proof of pay and salary we have verified, never to student accounts. When you switch it on we store your date of birth, gender, city, a short bio and your answers to our questions, to match you with other members. Members who match you see your first name, age, city and bio, and the answers you have in common; never your salary, employer or last name. Your chats are private between the two of you: Mshahara staff cannot read them, and no page on Mshahara shows them to anyone else. Every message and intro is stored encrypted. The key is not kept in the database: it is held in a locked setting that only the running site can use, so a copy or backup of the database does not reveal them. Mshahara's servers decrypt a chat only to show it to the two of you, or if the law requires us to hand it over. A message is deleted 24 hours after it is read, or 30 days after it was sent if it is never read, unless either of you chose to keep it (messages sent before 28 October 2026 are deleted 90 days after the chat ends, unless kept); the note of an intro that was declined or expired is deleted after 30 days; the written details of a report are deleted 12 months after it was made, while the report itself is kept. Copies in our database backups are gone within 30 days of a deletion. If you report someone, our team sees only the reason you choose and what you write in the report. You can switch Relationships off at any time, which hides you from everyone. Leaving deletes your profile and answers; your gender and date of birth stay with your account, so that a removed or false profile cannot come back changed, and are deleted with your account. Messages you have already sent stay with the person you sent them to. Reports about members are kept, so that someone removed for their behaviour cannot simply come back.

Employer reviews. Reviews do not need an account. The phone number or email you use to receive a code is stored as a one way hash so we can stop duplicate reviews. It cannot be turned back into your contact and is never linked to the review text shown on the site.

Recommendations. When a talent asks someone for a recommendation, we store that person's name and email to send the request and to limit repeat requests. We never show their name on the anonymous talent pool.

Saved and applied jobs. Only you can see which jobs you saved or marked as applied. Employers are never told.

Interview practice. The job description you paste and your answers are sent to Anthropic, the maker of Claude, to prepare Leyla's questions and write your feedback. Leyla's questions, not your answers, are sent to OpenAI to turn them into her voice. Speech recognition is done by your browser, which may use its maker's service (Chrome uses Google's). Transcripts are kept until you delete them from the interview's page.

Payments. Mobile money and card payments are processed by our payment partner Ultraner (earlier payments by Snippe). We store the phone number used to pay, the amount and the reference, nothing more.

The law. We disclose personal data to the authorities only when the law requires it.

Questions. Write to privacy@mshahara.co.