Privacy Policy

Bunasilia Technologies ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Buni mobile application. This policy complies with the Data Protection Act, 2019 of the Republic of Kenya.

Registration Data: Email address, username, gender, and optional first name, last name, date of birth. Google Account Data: When signing in with Google, we receive your email, name, and profile picture. Phone Number: Required for M-PESA wallet activation and withdrawals. User Content: Posts, comments, images, videos, and profile pictures. Communications: Messages sent to our support team. Device Information: Device model, operating system version, unique device identifiers. Usage Data: App interactions, features used, time spent, crash logs. Engagement Data: Posts viewed, upvoted, commented on, and shared. BLockchain Data: Transaction history, mining rewards, and withdrawal records stored on the BuniCoin blockchain.

Provide Services: Enable account creation, content posting, mining, and wallet functionality. Leaderboard & Rewards: Calculate virality scores, rankings, and distribute mining rewards. Communication: Send important updates, security alerts, and competition notifications. Improvement: Analyze usage patterns to enhance the App. Security: Detect and prevent fraudulent activity. Legal Compliance: Comply with applicable Kenyan laws and regulations.

Public Information: Your username, profile picture, posted content, and leaderboard position are visible to other Buni users. Service Providers: We may share data with trusted third-party service providers: • M-PESA (Safaricom PLC) - Payment processing • DigitalOcean - Cloud hosting and storage • Aiven - Database hosting • Google - Authentication services • Resend - Email communications Legal Requirements: We may disclose information if required by law, court order, or government regulation in Kenya. Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred.

Storage Location: Your data is stored on secure servers located within and outside Kenya, including DigitalOcean cloud infrastructure (Europe) and Aiven managed databases. Security Measures: We implement industry-standard security measures including: • SSL/TLS encryption for data transmission • Encrypted password storage (bcrypt hashing) • JWT-based authentication with token expiration • Rate limiting to prevent brute-force attacks • Regular security audits Data Retention: We retain your data for as long as your account is active. Upon deletion, personal information is removed within 30 days. Blockchain transaction records are immutable and cannot be deleted.

Under the Data Protection Act, 2019 (Kenya), you have the right to: • Access: Request a copy of your personal data • Rectification: Correct inaccurate or incomplete data • Erasure: Request deletion of your data • Restriction: Limit processing of your data • Objection: Object to processing of your data • Portability: Receive your data in a structured format To exercise these rights, contact us at admin@bunasiliatechnologies.co.ke.