Privacy notice.

Who. Sesh ID is operated by SeshDash (Kite Centre Zanzibar Ltd, Paje, Zanzibar, Tanzania) as an independent controller. Contact: privacy@seshid.com.

What we hold. Your email (and a hash of it), first name, date of birth (only to determine whether you are under 16), the lessons a school logged and signed for you (date, duration, level reached, conditions, gear, the instructor’s note), and your consent record. Never your waiver, health details, payments or signature image.

Why and on what basis. Your consent, given at the school or here. You can withdraw it on your passport page at any time; the passport and its lessons are deleted immediately.

Who sees it. Nobody, unless you choose otherwise. Your passport is private by default. A check code you show reveals only your first name, level, hours and issuing schools. Under-16 passports stay private and require a parent’s confirmation.

Where. Data is stored with Supabase in Frankfurt (EU) and served by Netlify. Schools that log lessons for you keep their own records under their own notices.

Your rights. Access, export (one click on your passport), correction via your school, erasure (one click), objection and complaint to your supervisory authority. We answer within 30 days; export and erasure are immediate.

Version 1 · 22 September 2026. This notice will be extended before public launch (EU/UK representatives, retention table, Tanzania PDPA registration).