Privacy Policy — Murandasi

This Privacy Policy explains how Murandasi (“we”, “our”, “us”), operated by Niyonkuru Olivier from Kigali, Rwanda, collects, uses, discloses, and safeguards personal information when you use the Murandasi website and mobile apps (together, the “Service”). By using the Service you agree to this Policy.

1. Information we collect

Account data: email address, display name, username, password hash, authentication provider (Google, Apple, email/password), preferred categories.
Profile data: avatar, biography, phone (optional), location (optional), website links.
User content: posts, photos, comments, likes, messages, voice notes, shared locations, product/service listings.
Transactions: subscription and boost payment records, verification requests. Card details are handled by our payment processor; we do not store full card numbers.
Device & usage: IP address, browser/user-agent, device model, coarse geolocation, session identifiers, crash reports, feature usage events.
Push tokens: web-push endpoint and keys used to deliver notifications you have enabled.
Cookies & local storage: essential session tokens and preferences. We do not use third-party advertising cookies.

2. How we use information

Provide, operate, and maintain the Service and your account.
Personalize your feed, search results, and suggested categories.
Process payments for premium plans, verification, and boosted posts.
Deliver push notifications for messages, follows, engagement, and system announcements (only for categories you enable).
Detect, prevent, and respond to fraud, abuse, spam, and security incidents.
Comply with legal obligations in the Republic of Rwanda and other applicable jurisdictions.

3. Legal bases

We process your data based on your consent (e.g. notifications, optional profile fields), contract performance (delivering the Service you signed up for), our legitimate interests (security, product improvement) and legal obligationwhere applicable.

4. Sharing

We share limited data only with:

Infrastructure providers hosting our database, storage, and edge functions.
Payment processors to complete premium and boost transactions.
Push delivery services to send the notifications you have subscribed to.
Law enforcement or regulators where required by valid legal process.

We never sell your personal information.

5. Retention

We keep your account data for as long as your account is active. If you delete your account, we permanently delete your profile, posts, messages, subscriptions, and push subscriptions within 30 days, except records we must keep for tax, fraud, or legal reasons.

6. Your rights

Access & export: download your data from Account → Security → Request my data.
Correction: update your profile at any time from the dashboard.
Deletion: permanently delete your account from Account → Overview.
Withdraw consent: disable push notifications or specific categories in Account → Notifications.
Complain: to your local data-protection authority.

7. Security

All traffic is encrypted with HTTPS/TLS. Passwords are hashed with industry-standard algorithms. Access to the database is protected by row-level security policies so each user can only read data they are authorized to see.

8. Children

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

9. International transfers

Your data may be processed on servers located outside Rwanda. We rely on appropriate safeguards, including provider-level encryption and contractual protections.

10. Changes

We may update this Policy from time to time. Material changes will be announced in the app and via the System Inbox.

11. Contact

Questions or requests: support@murandasi.com or via our Contact page.