Privacy Policy

1. Information We Collect

We collect information that you provide directly to us:

• Account Information: Name, phone number, email address, role (farmer, buyer, retailer, transport provider)
• Farm/Supplier Information: GPS location of farm/pickup point, product categories, harvest dates
• Delivery Information: Delivery address, GPS location, contact details for delivery
• Payment Information: M-Pesa phone number, transaction codes, payment amounts
• Vehicle & Licensing Information: (for transport providers) vehicle type, license plate, driver's license
• Photos & Evidence: Product images, proof of delivery photos, dispute evidence
• Device & Usage Data: Device type, IP address, app usage, geolocation (with permission)

2. How We Use Your Information

• Facilitate transactions – connect buyers, farmers, and transport providers
• Process payments – collect and release escrow payments via M-Pesa
• Coordinate logistics – match transport providers with orders and track deliveries
• Verify identity – prevent fraud and ensure safety
• Improve our services – analyse usage, resolve disputes, and provide support
• Communicate with you – send order updates, OTPs, and notifications
• Comply with legal obligations – tax, regulatory, and security requirements

3. How We Share Your Information

We share your information only when necessary:

• Between users – farmers see buyer's delivery location; transport providers see pickup/delivery details; buyers see farmer's product and pickup location
• With payment processors – Safaricom (M-Pesa) for payment collection and disbursement
• With messaging services – Twilio/WhatsApp for order notifications and OTPs
• With cloud hosting – AWS/DigitalOcean for data storage
• When required by law – to comply with legal processes or regulatory requirements

We do not sell your personal data to third parties.

4. Data Storage & Security

• Data is stored on secure servers in Kenya / cloud regions.
• All data transmitted between your device and our servers is encrypted (HTTPS/TLS).
• Passwords are hashed and never stored in plain text.
• Access to personal data is restricted to authorised personnel only.
• We retain your data only as long as necessary to provide our services or as required by law.

5. Your Rights

You have the right to:

• Access – request a copy of the personal data we hold about you
• Correct – update inaccurate or incomplete information
• Delete – request deletion of your data (subject to legal obligations)
• Withdraw consent – opt out of certain data processing (e.g., location tracking)
• Data portability – receive your data in a structured, machine-readable format

To exercise these rights, contact us at privacy@mambonami.com.

6. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us.

7. Third-Party Services

We use the following third-party services that may process your data:

• Safaricom M-Pesa – payments
• Twilio – WhatsApp/SMS notifications
• SendGrid – email notifications
• Firebase – push notifications
• AWS / DigitalOcean – cloud hosting
• Google Analytics – usage analytics (optional, with anonymisation)

8. Cookies & Tracking

We use essential cookies to maintain session state and remember preferences. We do not use tracking cookies for advertising. You can manage cookie preferences in your browser settings.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the platform after changes constitutes acceptance of the new policy.

10. Contact Us

If you have questions about this privacy policy or your data:

• 📧 Email: hello@mambonami.com
• 📱 Phone: +254 728 102 107
• 📍 Address: MAMBONAMI, Nairobi, Kenya