Privacy notice
Draft text: awaiting review.
Draft for legal review. [LEGAL REVIEW] The organisers will confirm this notice, including its basis under Tanzania's Personal Data Protection Act 2022, before registration opens.
This notice explains what information the Zanzibar Create with AI STEAM Challenge collects, why, who can see it and how long it is kept. The challenge is organised by Asili Zanzibar Tekno Hub and TUSOME Technologies Limited ("we").
The short version
- We collect as little as possible, especially about children.
- Students have no accounts. We record a student's first name, form and sex only, never surnames, phone numbers, addresses, dates of birth or photos of faces without consent.
- Voters' phone numbers are never stored in readable form and are erased 30 days after the finale.
- Personal information is deleted or anonymised 12 months after the finale.
- We do not sell information or use advertising trackers.
What we collect and why
| Who | What | Why |
|---|---|---|
| Teacher-mentors | Name, mobile number, school, head of school's name, and confirmation of the head's approval | To register the school, contact the teacher, and confirm they are authorised |
| Students | First name, form (1–5), sex, media consent choice, and a student code | To check the team rules, show first names where consent allows, and measure fairness between groups |
| Consent forms | Copies of parent or guardian consent, student assent and media consent | To show that each student may take part, and how their name and images may be used |
| Projects | Brief, video link, prototype evidence, AI Use Log, gallery summary and image | To screen, judge and, for the Top 50, show the project publicly |
| Voters | A scrambled code made from the phone number (a keyed hash), and a scrambled code of the network area | To allow one vote per number per category and detect fraud |
| Website visitors | Security records such as a shortened, scrambled network address | To protect the site from abuse |
Who can see it
Access depends on each person's role, and is recorded in a log that cannot be changed:
- Consent copies are stored separately and can be seen only by screeners and designated safeguarding leads.
- Judges see the projects assigned to them, without the school or island.
- Vote auditors see vote totals; nobody else does until results are published.
- Analysts see only anonymised data, without names.
- The public sees only the Top 50 gallery, with first names shown only where media consent allows.
We use service providers to host the website, store files and send SMS messages. [LEGAL REVIEW: list of providers and where data is stored.]
How long we keep it
- Voters' scrambled phone codes: erased 30 days after the finale.
- Personal information and consent copies: deleted or anonymised 12 months after the finale.
- Anonymised data, such as student codes with form and sex, may be kept to measure and improve the programme.
Before any deletion runs, the system reports to the organisers what will be deleted.
Your rights
You may ask to see, correct or delete the personal information we hold about you or your child, or object to how it is used. Parents and guardians may withdraw consent at any time; the student's information and images are then removed from public view. [LEGAL REVIEW: how to make a request and response times.]
Children
The challenge is for secondary school students, many of them under 18. Every student needs consent from a parent or guardian and their own assent. A teacher-mentor, not the student, provides their information. See Safeguarding.
Contact and complaints
Contact the organisers through the Contact page. [LEGAL REVIEW: data protection contact, and how to complain to the Personal Data Protection Commission.]
Last updated: October 2026.