Privacy Policy

Last updated: 28 October 2026

Mwanzo ("we", "us") is provided by Mwanzo Company Ltd. This policy explains what information we collect when you use our platform, why, and where it goes.

1. Information we collect directly

• Your email address, for signing in (magic link) and account messages.
• The descriptions (prompts) you write about your app, and the code generated from them.
• Images you upload in the builder. They are stored inside your app's project, and once you publish the app they are publicly visible to anyone who opens it.
• Credentials you choose to add, such as your database connection string or ClickPesa keys. They are stored encrypted on our servers and used only to carry out actions you explicitly request (saving data, starting payments).
• Technical usage records (for example, whether a build succeeded or failed) and the credits you used, to improve the service and prevent abuse.
• Answers you choose to give in the pricing survey, credit requests, and emails you send to support@mwanzo.dev.
• For organisations: members and their roles, billing details, and an audit log of actions (who did what, when, and from which IP address), kept for at least 2 years. If you sign in with your company's SSO, we receive your email address and name from its identity provider.

2. Your customers' information

If you connect your own database (Supabase/Neon), the information your customers enter in your app (for example bookings, requests, orders) is stored directly in your own database, not on Mwanzo's servers. We only act as a connection (proxy) so that browser code doesn't have to carry your real credentials. You own and control that information. This Privacy Policy is not legal advice about your own obligations for your customers' data; please consult a lawyer if your business needs it.

For that data you are the data controller and Mwanzo is your data processor, as set out in our Data Processing Agreement.

3. Payments

Payments through ClickPesa use your own ClickPesa account: the money goes directly to you, not to Mwanzo. We keep small records of payment requests (order number, amount, status) to help you follow your orders in the dashboard.

4. Who else sees your information

• Anthropic (Claude) receives your descriptions (prompts) and your project's files to generate and change code, under its usage policies.
• Google (Gemini) receives short image descriptions, written by the AI from your app's description, to generate placeholder images. Images you upload yourself are not sent to Google.
• E2B provides the temporary environment that runs your app while you build it.
• Vercel hosts published apps.
• Supabase stores the Mwanzo platform's own database (accounts, requests, settings).
• Resend sends sign-in and service emails, and receives email sent to support@mwanzo.dev.
• GitHub: if you connect your account, your app's code is pushed to your repository.

We don't sell your information to anyone for advertising.

5. Security

Sensitive credentials (connection strings, payment keys, GitHub tokens) are stored encrypted (AES-256) in our database, and are never placed in your app's public code.

6. Deleting your account or data

You can delete any app at any time from the dashboard; this removes all of its data from our systems. Information stored in your own database (Supabase/Neon) or your ClickPesa/GitHub accounts is not deleted by us; you manage it through those accounts.

7. Your rights

Under Tanzania's Personal Data Protection Act (Cap. 44, enacted as Act No. 11 of 2022) you may ask us for a copy of the personal data we hold about you, to correct it, to delete it, or to stop using it for a purpose, by emailing support@mwanzo.dev. We reply within 30 days. You can also complain to the Personal Data Protection Commission.

The providers in section 4 process data outside Tanzania, mainly in the United States; we transfer it only under the conditions of sections 31 and 32 of the Act and its regulations.

8. Contact

Questions about your privacy: support@mwanzo.dev.

This document is a general summary of how information is used on the Mwanzo platform, not legal advice. It may be updated from time to time as the platform grows.