1. Introduction

Daré Renhanga is a platform dedicated to wellbeing wisdom rooted in African healing traditions, built and managed by Kasuku Studio. We are committed to protecting the privacy and personal data of our global community. Because we serve the global African diaspora, this policy is designed to comply with the General Data Protection Regulation (GDPR) in the European Union, the UK Data Protection Act, and the Protection of Personal Information Act (POPIA) in South Africa.

2. Information We Collect

We collect the minimum necessary data to deliver a secure, personalized experience in the library and My Space:

• Account Information: Your email address, name, and profile picture provided during Google OAuth authentication or verification email.
• Personal Practice Logs: The practices you choose to commit to, calendar check-in dates, reflection notes, and feeling words.
• Bookmarks: The list of wisdom cards you save to your personal archive.
• Social Logs: The circle groups you join, group memberships, and reactions left on check-ins within My Space.

3. How We Use Your Data

We process your information based on your explicit consent and for the performance of our service. Specifically, we use your data to:

• Authenticate you and protect your account from unauthorized access.
• Display and organize your personal bookmarks and check-in calendar.
• Allow you to share wellness reflections with your selected circles.
• Send transactional notifications (such as sign-in codes) directly related to your account usage. We do not sell your personal data or use it for third-party advertising.

4. Data Retention and Deletion (Right to Erasure)

We respect your right to control your digital footprint. In compliance with GDPR Article 17 and POPIA Section 24, we provide a direct, self-serve account deletion flow:

You can delete your account at any time by navigating to your Bookmarks page, scrolling to the bottom under Account Settings, and clicking "Delete My Account".

Once confirmed, a database transaction is triggered that immediately and permanently deletes your user record, email, session tokens, bookmarks, practice history, check-in reflections, circle memberships, and reactions. Backup logs are cycled out within 30 days.

5. Security of Your Data

All database connections are securely encrypted (SSL), and we implement application-level rate limiting to prevent credential stuffing or bot attacks. We host our databases on Railway in secure environments and use Cloudflare proxying to protect our endpoints from external threats.

6. Regulatory Rights and Complaints

You have the right to request access to your data, correction of inaccurate details, or restriction of processing. If you have any concerns regarding how we handle your data, please contact us.

If you feel we have not addressed your concerns adequately, you have the right to lodge a complaint with a supervisory authority:

• United Kingdom: The Information Commissioner's Office (ICO) — ico.org.uk
• South Africa: The Information Regulator — inforegulator.org.za