Huza NetworkHuza Network
Sign in
Back

Privacy Policy

Last updated: 20 September 2026

Huza Network ("we", "us") is committed to protecting your personal data in accordance with Rwandan Law N° 058/2021 of 13/10/2021 relating to the protection of personal data and privacy ("the Data Protection Law"), and any other applicable law in jurisdictions where you use the service.

1. Data Controller

Huza Network acts as the data controller for personal data processed via this platform. You can contact our data protection contact at privacy@huzanetwork.com.

2. Data We Collect

  • Account data: name, email, password (hashed), role (mentor / mentee / admin).
  • Profile data: bio, avatar, expertise, interests, education level, goals, hourly capacity.
  • Contact data: phone number (optional, used by admins for follow-up).
  • Activity data: matches, messages, session notes, feedback, internship applications and CVs.
  • Technical data: device and browser information, IP address, log timestamps for security.

3. Purpose and Legal Basis

We process your data, under Article 5 of the Data Protection Law, on the following bases:

  • Consent (Art. 6) — when you sign up and tick the consent box.
  • Contract performance — to operate the mentorship, sessions and internship features you requested.
  • Legitimate interest — platform safety, fraud prevention and product improvement.
  • Legal obligation — where required to respond to lawful requests.

4. Who Sees Your Data

  • Your mentor or mentee can see your name, avatar, bio and shared session content once matched.
  • Other authenticated users can see public profile fields (name, avatar, short bio); they cannot see your email, phone or onboarding timestamps.
  • Huza administrators may access your data for safety, support and reporting.
  • We share data with processors strictly to operate the service: hosting & database (Supabase / AWS-region infrastructure), email delivery and payment processors. These processors are bound by contract and confidentiality.
  • We do not sell your personal data.

5. Cross-Border Transfers

Some processors store data outside Rwanda. We rely on contractual safeguards and the conditions set out in Articles 48–50 of the Data Protection Law for any transfer outside the country.

6. Retention

We keep your account data for as long as your account is active. After deletion we keep minimal records (audit logs, tax records, safety reports) only for the period required by law, after which they are deleted or anonymised.

7. Your Rights

Under the Data Protection Law you have the right to:

  • Access your data and obtain a copy.
  • Correct inaccurate or incomplete data.
  • Withdraw consent and request deletion of your data, subject to legal retention.
  • Object to or restrict processing in certain circumstances.
  • Receive your data in a portable, machine-readable format.
  • Lodge a complaint with the National Cyber Security Authority (NCSA) of Rwanda — the supervisory authority for data protection.

To exercise any of these rights, email privacy@huzanetwork.com. We respond within 30 days as required by Article 18 of the Data Protection Law.

8. Security

We apply technical and organisational safeguards including TLS encryption in transit, encryption at rest for sensitive fields, password hashing, role-based access control, row-level security in the database, and routine audits. No system is perfectly secure; please use a strong unique password and notify us promptly of any suspected breach.

9. Children

Huza is intended for users 18+ or 13+ with verifiable consent of a parent or legal guardian. We do not knowingly collect data from children below this age. Contact us to request removal if you believe a child has registered.

10. Cookies

We use strictly necessary cookies for authentication and session management, and minimal analytics to improve the service. You can clear cookies in your browser at any time.

11. Changes

We may update this Policy. Material changes will be notified through the platform or by email. See also our Terms of Service.