Privacy Policy
DRAFT: this document is a working draft prepared for review by a qualified Rwandan lawyer. It is not legal advice and must not be relied upon as such until reviewed and approved by legal counsel.
Who is responsible
[Operator name and contact details to be completed before launch.]
What we collect
Account: email address, phone number(s), a password stored only as a salted hash. Profile: name, district of residence, districts where you serve, capabilities, photos, optional description, education, languages, availability, and a link. Optional: date of birth and gender. National Identification Number, if provided, is stored privately. Device: a random device identifier stored in your browser, used for discovery and relevance. Reports you submit. Search terms are logged without your identity for platform statistics.
Why we use it
To create your account, show your profile to people looking for your abilities, give profiles fair exposure, keep results relevant, protect users, handle reports, and comply with applicable law.
What is visible to others
Name, district, service districts, capabilities, photos, description, education, languages, availability, WhatsApp, and phone numbers you provide. Your email address, password, and National Identification Number are never shown to other users.
Device identifier and discovery
The device identifier is random and not linked to your name. It records which profiles were shown or opened on that device and simple interest signals that fade over time (20% per 24 hours). It is not shared with other users.
Sharing
Personal data is not sold. Hosting and email providers used by the operator may process data on its behalf. Data may be disclosed where the law requires it.
Retention and deletion
When you delete your account, the profile is hidden immediately and the account can be recovered within six months. After six months, your account, profile, photos, and saved profiles are permanently deleted. Reports about a profile may be kept for moderation records.
Security
Passwords are hashed with scrypt. Sessions use HttpOnly cookies. Requests are validated and rate limited, and private fields are separated from public profile data. No system is perfectly secure.
Your choices
You can edit your profile, change your password, and delete your account in the app. You may contact the operator about your data using the details above.
Children
AHABONA is intended for adults aged 18 and over.
Changes
This policy may be updated and changes will be communicated in the product.