Including Data Retention Policy
Effective date: 17 August 2026
We are committed to protecting your privacy. This policy sets out what information the App collects, how it is used, how long it is kept, and the choices available to you. By using the App, you agree to the practices described in this policy.
When you create an account, we collect your name, email address, and a password (stored in encrypted/hashed form) for the purpose of account creation and authentication.
All other information generated through your use of the App — including your daily activity, work logs, and progress data — is stored locally on your device only. This data is not uploaded to, or stored on, any Umoya Zone server, database, or cloud service, and we do not have access to it.
The App uses Firebase Cloud Messaging, a service provided by Google, to send push notifications. To do this, Firebase generates a unique device/registration token, which is a form of device identifier. Firebase may also process limited technical data (such as device type, operating system version, and app version) needed to deliver notifications reliably. This information is used solely to deliver notifications to your device and is not used by us for advertising or combined with your account details for any other purpose.
To create and authenticate your account, and to secure it against unauthorised access.
To send you push notifications you have opted into (via Firebase Cloud Messaging).
To detect, prevent, and address fraud, abuse, or security incidents.
To comply with applicable law or respond to lawful requests from public authorities.
We do not use your information for advertising, profiling, or any purpose beyond those listed above.
We do not sell, rent, or otherwise share your personal information with third parties for their own commercial purposes.
The only third party involved in processing personal data on our behalf is Google Firebase, which processes push notification tokens strictly as our service provider, under Google's own privacy terms. You can review Firebase's privacy practices at firebase.google.com/support/privacy.
Your daily work and progress data, being stored only on your device, is never shared with us or any third party through the App.
This section describes, for each category of data, how long it is kept and what happens to it thereafter.
We retain data only for as long as is necessary to provide the App's functionality, meet the purposes described in Section 3, and comply with legal or regulatory obligations. Where data is retained for security, fraud-prevention, or legal-compliance reasons beyond an account's active life, it is limited to what is strictly necessary for that purpose.
We implement reasonable technical and organisational measures to protect your login credentials against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Subject to applicable law, you have the right to:
Access the personal information we hold about you.
Correct inaccurate information.
Request deletion of your account and associated login credentials.
Withdraw consent to processing, where processing is based on consent.
To exercise any of these rights, contact us at info@umoya-zone.com or reg@umoya-zone.com. We will verify your request and action it within a reasonable time.
This policy is governed by the Protection of Personal Information Act, 2013 (POPIA), as Umoya-Zone is operated from Mauritius.
We may update this policy from time to time. Material changes will be notified within the App and reflected by an updated "Effective date" above. Continued use of the App after changes take effect constitutes acceptance of the revised policy.