Privacy Policy

Mwosho is an AI-powered data quality automation service operated by Mwosho (we, us, our). If you have any questions about this policy, contact us at privacy@mwosho.app.

Account information

• —Email address — to identify your account and send you processing notifications.
• —Full name — optional, used to personalise emails.
• —Password — stored as a bcrypt hash; we never store the plain text.
• —Subscription tier and billing dates — to manage your plan.

Payment information

Card details are handled entirely by Stripe. We receive only a Stripe customer ID and subscription status. We never see or store your card number, CVV, or billing address.

Job metadata

• —Original filename and file size.
• —Row count, quality scores before and after cleaning.
• —Processing status and timestamps.
• —Cleaning options you selected.

This metadata is kept so you can review your job history. It contains no rows or content from your actual files.

Your uploaded files

Files you upload are stored temporarily on our servers solely to perform the cleaning operation. They are permanently deleted the moment you download the result, or automatically after 1 hour — whichever comes first. We do not read, analyse, or share the contents of your files for any purpose other than the cleaning you requested.

Usage and technical data

• —IP address and browser type — for security and abuse prevention.
• —API request logs — retained for 30 days, then deleted.

• —To create and manage your account.
• —To perform the data quality automation you requested.
• —To send you a notification email when your cleaned file is ready.
• —To process subscription payments through Stripe.
• —To investigate security incidents if they occur.
• —To improve the service (using only anonymised, aggregated usage patterns — never your file contents).

We do not sell your data. We do not use your data for advertising.

We share data with the following processors only to the extent necessary to provide the service:

Depending on where you are located, you may have the right to:

• —Access the personal data we hold about you.
• —Correct inaccurate data.
• —Request deletion of your account and associated data.
• —Export your data in a portable format.
• —Object to or restrict certain processing.
• —Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, email privacy@mwosho.app. We will respond within 30 days.

Our servers are currently located in the EU (Hetzner). If your data is transferred outside your country, we take reasonable steps to ensure adequate protection. Where required, we rely on standard contractual clauses or equivalent mechanisms.

We use HTTPS for all data in transit, encrypted storage for credentials, and access controls on all internal systems. However, no system is perfectly secure. If we become aware of a breach affecting your data, we will notify you and relevant authorities as required by law.

Mwosho is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it promptly.

We may update this policy from time to time. When we do, we will update the date at the top of this page and, for material changes, notify you by email. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your rights, contact us at privacy@mwosho.app.

If you are in Kenya and believe we have not handled your data lawfully, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

If you are in the EU or UK, you have the right to complain to your local data protection authority.