Privacy
Last updated : 2026
Kaddu is built around a simple principle: collect the strict minimum. There is no mandatory account, no advertising profile, no commercial tracking.
Data controller
The data controller is Pape Alamine Sarr (Dakar, Senegal). elhadjipapealaminesarr@gmail.com
The secrecy of your vote
Each ballot is encrypted, then the tally is computed directly on the encrypted data using Zama's fully homomorphic encryption (FHE). The organizer never sees an individual vote: only the total result is revealed once the vote is closed. Honest note: in the web version the server performs the encryption; the guarantee where not even the operator can decrypt anything comes from the on-chain (fhEVM) version.
Data processed
To run the service, Kaddu keeps: the title, question and choices you enter; the encrypted ballots; the anonymous tokens of member links (no identity attached); for tontines and tenders, the progress of the steps (declared contributions, sealed bids), with sensitive amounts kept encrypted. If you create an account (optional), your email address and a hashed password (never stored in clear text) are kept. A small technical cookie prevents double voting. The host may keep temporary technical logs (IP address, timestamp) for security.
Legal basis
Processing is based on your consent (voluntary participation) and on the publisher's legitimate interest in providing a secure service and protecting it against abuse.
Cookies
Kaddu only uses strictly necessary cookies: an anti-double-vote cookie (also used for anonymous visitor counting), a session cookie if you log in, and remembering your language. No advertising cookies or third-party trackers.
What Kaddu does not do
No request for name, email or phone to vote. No selling of data. No advertising cookies or third-party trackers. Kaddu never moves money.
Retention
The data of a vote, tontine or tender is kept for the duration of its organization. You can request the deletion of an item you created by writing to us.
Hosting and international transfers
The application (Render) and its database (Neon) are hosted on servers located in the United States; these providers act only as hosting subcontractors (see the Legal notice). A transfer of data outside Senegal and the European Union may therefore occur; it is limited to the strict technical operation of the service.
Security
Traffic is encrypted over HTTPS. Ballots and sensitive data are protected by Zama's homomorphic encryption (FHE). Account passwords are hashed (never readable). As no measure is infallible, avoid publishing information you would not want processed.
Minors
Kaddu is not intended for children and does not knowingly collect their personal data.
Your rights & contact
You can request access, correction, deletion of, or object to the processing of data concerning you by writing to elhadjipapealaminesarr@gmail.com. You may also refer the matter to the CDP (Personal Data Protection Commission, Senegal) or, in the European Union, your data protection authority (for example the CNIL in France).
Changes
This policy may change. The date of the last update appears at the top of the page; significant changes will be indicated on the site.
This document aims to inform users clearly. For use by an official organization, have it reviewed by a lawyer in light of your situation and applicable regulations.