Document version: 2026-10-30-privacy-v1 · Approved by operator Festo Salumu · 2026-10-30

Privacy Policy

This Policy describes MAKINI data processing according to verified service behavior. Unfinished features are not described as completed.

1. Who is responsible

MAKINI is operated personally by Festo Salumu under the business name SMM Tanzania; it is not an incorporated company. Privacy and account-deletion requests: bookmakiniapp@gmail.com. Responsibilities between the operator and businesses entering their own customers' and staff data must be clarified before publication.

2. Data handled

For accounts: full name, email, Tanzania phone number, user ID, requested account type, email confirmation status, terms version/time, and sign-in session information. For trial/entitlements: original Owner and business identifiers, server-recorded 3-day trial start/end, plan type and access status. For businesses: business name, category, phone, country/currency and optional address/email/details or logo. On-device: products, categories, sales, expenses, customers, suppliers, debts, payments, invoices, notes and other entries you create.

3. Why data is used

Account data is used for registration, authentication, account recovery, access controls, preventing repeated 3-day trials and evidence of terms acceptance. Business records are used to display and manage entries you create. The terms checkbox is not separate consent for marketing advertisements or promotional SMS.

4. Service providers and data locations

Supabase provides authentication, profiles, businesses and memberships. The verified production project is in EU West (Ireland); this does not establish that every data flow or provider remains in that region. Operational business records remain local on the device and verified cloud sync is not implemented. Device/OS services may also process information necessary for storing or sharing a PDF when you choose to do so.

5. Disclosure and access

Within MAKINI, business-profile access is restricted through authorized owner/staff memberships and database policies. Account data is processed by Supabase to provide the service. Other disclosures required by applicable law need operator review. This draft does not make an unsupported claim that no information is transferred outside Tanzania.

6. Security, sessions and device storage

MAKINI uses Supabase Auth, supported secure session-token storage and server-side membership checks. Operational records are currently saved in the app. Browsers and devices have their own risks; absolute security cannot be promised. No third-party advertising/analytics SDK was confirmed in the reviewed application dependencies.

7. Retention and deletion

Retention periods for accounts, backups, logs and business records have not been verified and are not represented by an invented number of days. Logging out does not remove server data. There is not yet a verified feature for deleting the full account, exporting all data or removing business data directly from the server. A request process and any legally required retention must be approved before publication.

8. Your requests and rights

You may ask about your data and its use through bookmakiniapp@gmail.com. Access, correction, deletion or objection requests must be addressed subject to applicable law, verification of the requester and the necessary procedures. No response deadline is promised without confirming capability and legal requirements.

9. Children, changes and contact

MAKINI is intended for users aged 18 or older. Technical verification of age attestation for public registration must still be completed. Material privacy changes require a new version and appropriate notice. Privacy contact: bookmakiniapp@gmail.com. Legal registration and address remain subject to review before publication.