Provisional — this policy is being reviewed and may change.
Privacy policy
Last updated 21 October 2026
Sendd is a prepaid bulk SMS service for businesses in Tanzania. It is operated by Kaypee Group Limited, Dar es Salaam, Tanzania ("we", "us"). This policy explains what personal information we handle when you use sendd.africa, app.sendd.africa and the Sendd API, why we handle it, who we share it with and how to contact us.
Whose information this covers
Account information: the people who sign up for Sendd and use it for a business. We decide how this information is used.
Contacts and messages: the phone numbers, names and message text that a business adds to Sendd to send its SMS. We handle this information on that business's behalf, only to provide the service to it. The business decides whom it texts and is responsible for having their consent where it is needed.
If you received an SMS from a business that uses Sendd, contact that business first. You can also write to us (see Contact us).
Information we collect
- Your account: your email address or Tanzanian mobile number (or both), your name if you give it, and your password, which we store only as a one-way hash. When you sign in with a one-time code, we keep only a protected copy of the code and delete it within 24 hours.
- Sign in with Google: if you choose it, Google gives us your name and your email address, which Google has verified. We never receive your Google password.
- Sign-in and security records: when you sign in, we record the IP address and the browser (user agent) of the session. We keep an audit log of important actions in your organization, such as changes to members, keys and settings.
- Your business: its name, its members and their roles, the invitations you send, and sender name requests (the name, what it will be used for and a sample message).
- Contacts and messages: the phone numbers, names, consent records, opt-outs and groups your business adds by hand, through the API or by CSV import; the text of the messages and campaigns you send; and delivery records from our SMS delivery partners (status, times and the recipient's number).
- Developer settings: API keys, which we store only as a hash (the full key is shown to you once), and webhook endpoints with a record of their deliveries.
- Payments: wallet top-ups are paid by mobile money. We keep the amount, its status and a masked form of the paying phone number (never the full number), and a ledger of every credit and charge on your wallet.
How we use information
- To provide Sendd: run your account, send your messages, record their delivery and show you reports.
- To keep accounts and the service secure: check sign-ins, send one-time codes, limit abuse and investigate problems.
- To bill you correctly: process top-ups, keep your wallet balance and keep accounting records.
- To send you service emails and SMS: verification and sign-in codes, invitations, security notices and notices about your account or settings. These are not marketing.
- To keep the service running: our monitoring uses totals and counts only, never phone numbers or message text.
We do not use advertising or analytics tools on our websites or in the dashboard.
Where your information is stored
Sendd's servers and database are in a data centre in the European Union (Germany), run by Hostinger. Encrypted backups are stored with Cloudflare, and emails are sent through Amazon SES in the United States. This means your information is stored and processed outside Tanzania.
How we protect information
- Connections to Sendd are encrypted (HTTPS).
- Passwords, API keys, session tokens and one-time codes are stored only as hashes, and other secrets are encrypted.
- Each business's data is kept separate in the database, so one business cannot see another's contacts or messages.
- Our staff sign in with multi-factor authentication, and their access is recorded in an audit log.
- Our logs leave out phone numbers, message text and passwords.
- Backups are encrypted.
How long we keep information
We keep account and business information for as long as your account is active, and after that for as long as we need it for the purposes above or as the law requires.
- Records needed for accounting, such as your wallet ledger and payments, are kept and never deleted.
- Opt-outs are kept for each number even after the contact is deleted, so that the number is not texted again by mistake.
- Records of one-time codes are deleted within 24 hours.
- Rows from imported CSV files are deleted 30 days after upload (the contacts they created stay until you delete them).
- Webhook delivery records are currently deleted after 30 days.
- Backups are kept for a limited time.
Your choices
- You can see your business's information in the dashboard, and delete its contacts and groups at any time.
- To access, correct or delete your personal information, or to ask how we use it, contact us. We may need to confirm who you are first.
- Some records cannot be deleted while we need them, such as accounting records and opt-outs (see How long we keep information).
- If you receive messages from a business that uses Sendd and want them to stop, contact that business.
Email: founder@kaypeetech.com
Changes to this policy
This is a provisional version and will be updated after review. When we change it, we will update the date at the top of this page.
Contact us
For any question or request about privacy, write to us. Sendd is operated by Kaypee Group Limited, Dar es Salaam, Tanzania.
Email: founder@kaypeetech.com