Website Privacy Policy

1. Scope and who is responsible

This Privacy Policy applies to the public pages, portfolio, contact channels and website features available under mahando.com. For this website, Mahando is operated by Gabriel Marwa Mahando in Tanzania and is responsible for deciding how website information is handled.

Individual Android or Flutter applications may collect different information for app accounts, offline reading, analytics, advertising, purchases, notifications or media delivery. Those applications have their own app-specific privacy notices. This website policy does not replace them.

2. Information the website may handle

Information you choose to provide

• Contact information: your name, email address, phone number and the contents of a message when you contact Mahando by email, WhatsApp or a website contact route.
• Project information: requirements, files, links or business details you decide to include when discussing an engineering engagement.
• Contribution details: first name, last name, phone number, selected payment method and amount when you start a voluntary contribution from the website.

Information generated when the website is used

• Technical and security logs: internet protocol address, requested URL, date and time, browser or device information, referrer, response status and similar server records used to deliver and protect the website.
• Preference data: the light or dark appearance you select. The website stores this locally in your browser under the key mahando-theme.
• Advertising and service data: on pages that display Google advertising or load a third-party service, the provider may receive identifiers, device or browser details, page information and interaction data under its own terms.

Mahando.com does not ask you to create a general website account and does not intentionally collect sensitive personal information through the portfolio pages.

3. Why information is used

Information is handled only where it supports a clear website or business purpose, including:

• delivering pages, media and requested website functions;
• responding to questions, support requests and project enquiries;
• preparing for or performing a separately agreed professional engagement;
• initiating and confirming a voluntary contribution or resolving a payment problem;
• remembering your chosen website appearance;
• maintaining security, diagnosing failures, preventing abuse and protecting infrastructure;
• meeting legal, accounting, regulatory or dispute-resolution obligations; and
• operating advertising on pages where advertising is clearly present.

Depending on the context and applicable law, processing may be based on your consent, steps requested before a contract, performance of a contract, compliance with a legal obligation, or a legitimate interest such as website security, communication and service improvement. Where consent is the basis, it may be withdrawn for future processing.

4. Voluntary contributions and payment processing

The support form can send the contribution amount, your name, phone number and selected payment method to the Mahando payment endpoint so a payment provider can process the request. The provider may return a transaction status, reference or error needed to confirm or troubleshoot the request.

A Mobile Money authorization takes place with your provider on your own device. Mahando.com does not ask you to type your Mobile Money PIN into this website. Card and Mobile Money providers process payment credentials under their own privacy and security terms. Mahando should receive only the information needed to initiate, identify, reconcile or support the transaction.

Contribution and transaction records may be retained where reasonably needed for reconciliation, fraud prevention, support, accounting or legal compliance.

5. Services, processors and information sharing

Mahando does not sell personal information. Limited information may be disclosed only when needed to operate a feature, provide a requested service or meet a legal obligation.

A provider's own privacy terms govern its independent handling. Selecting an external link takes you to that provider's service.

6. International data transfers

Mahando is based in Tanzania, while some infrastructure, communications, advertising or payment providers may process information in other countries. Privacy laws and protections can differ between locations. Where required, reasonable contractual, technical or legal safeguards will be used for an international transfer.

7. How long information is kept

Information is retained only for as long as reasonably necessary for the purpose for which it was collected, and longer only where security, fraud prevention, accounting, dispute resolution or law requires it. Retention therefore depends on the type of record:

• routine server logs are kept for an operationally reasonable period;
• enquiries are kept while they remain active and for a reasonable follow-up period;
• client records follow the relevant agreement and legal requirements;
• payment records may be kept for reconciliation, support, tax or compliance; and
• the theme preference remains in your browser until you change it or clear site data.

Information may be anonymized instead of deleted where it can no longer reasonably identify a person.

8. Security

Reasonable administrative and technical measures are used to protect website information, including secured connections, access controls, server maintenance and limiting information to what a function needs. No website, transmission or storage method can be guaranteed completely secure.

If you believe information connected to Mahando.com has been exposed or misused, contact support@mahando.com with enough detail to investigate, but do not email passwords, PINs or full payment credentials.

9. Your choices and privacy rights

Subject to applicable law and appropriate identity verification, you may ask to access, correct, update or delete personal information connected to the website. You may also ask for processing to be restricted, object to certain processing, request available portability, or withdraw consent for future processing.

You can manage browser storage and cookies through your browser, use Google advertising controls where relevant, and choose whether to contact Mahando through an external service. Some information may need to be retained where law or a valid legal claim requires it.

Requests can be sent to support@mahando.com. You may also have the right to raise a concern with Tanzania's Personal Data Protection Commission or another competent authority.

10. Children's privacy

The portfolio and professional-contact features are intended for a general audience and are not designed to collect personal information from children. If a parent or guardian believes a child submitted personal information through the website, they should contact Mahando so the matter can be reviewed and addressed.

11. External websites and application policies

Mahando.com links to Google Play, WhatsApp and other external websites. Their privacy practices are controlled by their own operators. A link does not make Mahando responsible for an external service.

Mobile applications presented on the portfolio may have their own privacy policy within the application page or store listing. Review that application-specific notice before using features that involve accounts, analytics, advertising, purchases, notifications or cloud synchronization.

12. Policy changes and contact

This policy may be revised when the website, providers or legal requirements change. A material update will be reflected by the date at the top of this page and, where appropriate, an additional notice.