Legal & Data Protection

Privacy Policy

Your trust is our highest priority. This policy explains how MindEN Labs Co. Ltd and our digital products — including Uliza Hapa, PostPata, Soonify, and MindEN — collect, manage, and protect your personal information.

Active & EnforcedEffective: September 17, 2026Version: 2.5.0Scope: Global & East Africa

🔒

Zero Data Selling

We never monetize, rent, or trade your personal data or location coordinates to third-party advertisers.

🛡️

Encrypted in Transit

All data between our apps and servers travels over HTTPS (TLS), and database access is restricted to authorised staff.

🗑️

Right to Erasure

Delete your account at any time, in the app or by request, processed within 30 days.

01 — Introduction

Scope & Products Covered

This Privacy Policy applies to our website (mindenlabs.com), our client portals, API endpoints, and our full product ecosystem:

Uliza HapaLocal discovery & foot navigation

PostPataDigital opportunities & classifieds

SoonifyTeam collaboration & workspace

MindEN AppMental fitness & brain games

02 — Data Collection

Information We Collect

📍

Location Data

Precise & Approximate

With your permission, GPS is used to find nearby shops and guide you on foot. Some location data is stored: walking routes recorded by field agents, a driver's latest position while working, and the pickup point of a ride you request. Location is never sold or used for advertising.

👤

Account & Identity

Profile Information

Name, phone number (and email where a product uses it), and a hashed PIN or password, collected when you register as a user, merchant, agent, or driver on a MindEN Labs platform.

🖼️

Media & Content

Photos & Uploads

Shop photos and videos, profile photos, and short voice notes that field agents record to describe a corner on a walking route, stored on secure cloud servers.

📱

Technical Data

Device & Diagnostics

Device model, OS version, browser type, and crash logs are collected to ensure app stability, fix bugs, and optimise performance across all platforms.

02b — Uliza Hapa

What Uliza Hapa Collects and Shares

Customers

Name, phone number and PIN (hashed) to sign in. When you request a Bodaboda: your pickup location, the shop, the estimated fare and the phone number the driver should call.

Drivers

Name, phone number, vehicle, plate number and stand, registered by our office. While working: the latest position, which customers see during their ride.

Field agents

Shops they register (name, building, door, WhatsApp number, photos, video) and walking routes they record (GPS track and corner voice notes). Shop details are public so customers can find and contact the shop.

Shared during a ride

A driver sees a request's pickup point and shop; your name and number only once they accept. You see the driver's name, number, plate and position.

Service providers

Vercel (hosting), MongoDB Atlas (database), Cloudinary (photos, video and voice notes) and, once enabled, Beem Africa (SMS codes). Maps are loaded from OpenStreetMap tile servers, which receive your device's IP address. None of them may use your data for their own purposes.

Retention

Account data is kept until you delete the account. Ride records are kept without your name and number after deletion. Shops and routes remain, as they describe places rather than people.

03 — App Permissions

Mobile App Runtime Permissions

Our apps request only permissions strictly necessary for core features. You can revoke any permission in your device settings at any time.

Permission	Platform	Purpose	Level
`ACCESS_FINE_LOCATION`	Android / iOS	Find nearby shops, guide walks, request a ride pickup, and share a working driver's position	Navigation
`FOREGROUND_SERVICE_LOCATION`	Android	Keep recording a walking route (field agents) or receiving ride requests (drivers) with the screen off, shown by an ongoing notification	Staff only
`POST_NOTIFICATIONS`	Android	Alert a working driver to a new ride request	Optional
`RECORD_AUDIO`	Android / iOS	Field agents record a short voice note describing a corner on a route	Staff only
`Camera & photos`	Android / iOS	Take or choose shop photos and videos, or a profile photo, through the system picker	Optional
`INTERNET`	Android	Load shops, routes and map tiles	Required

04 — Data Usage

How We Use Your Information

We collect and process personal data exclusively for verified business and product purposes — no profiling, no ads.

01Delivering live navigation routes, shop discovery, and map visualisations.
02Authenticating users and preventing fraudulent listings.
03Facilitating direct communication between clients and businesses.
04Providing customer support and critical security notifications.
05Benchmarking app speed and reducing battery consumption.
06Complying with regulatory and legal obligations in Tanzania.

05 — Security

Data Security & Storage Standards

TLS 1.3 Encryption

All communication between apps, browsers, and our APIs is encrypted in transit using industry-leading transport security.

Password Hashing

Sensitive credentials are cryptographically hashed using salted algorithms (bcrypt / argon2) — never stored in plain text.

Role-Based Access

Production database access is strictly restricted to verified personnel on a need-to-know basis using RBAC controls.

06 — Your Rights

Data Retention & Deletion Rights

You retain sovereign rights over your data. Request permanent deletion of your profile, shop listings, and associated content at any time.

🗑️

How to Request Account & Data Deletion

Uliza Hapa: open the app, go to Mipangilio (Settings) and tap Futa akaunti (Delete account); it is deleted immediately. Details and other ways to ask: mindenlabs.com/uliza-hapa/futa-akaunti.
Or send an email to [email protected] with subject line "Data Deletion Request".
Include your registered email address or phone number and the app name (e.g. Uliza Hapa).
Our team will purge your identifiable data within 30 calendar days and issue an official confirmation.

07 — Compliance

Legal Basis & Regulatory Compliance

MindEN Labs Co. Ltd adheres to the Tanzania Personal Data Protection Act (PDPA, 2022) and internationally recognised data protection principles including GDPR-compatible fair processing standards. Our legal bases for data collection include: (1) Contractual necessity, (2) Legitimate business interests, (3) User consent, and (4) Statutory legal obligations.

08 — Contact

Contact & Legal Entity

For privacy concerns, data requests, or legal inquiries, our Data Privacy Officer is reachable through any of the channels below.

📍

MindEN Labs Co. LtdDar es Salaam, Tanzania

📧

Privacy & Support Email[email protected]

📞

Phone & WhatsApp+255 673 893 640

🌐

Official Websitemindenlabs.com