Privacy Policy

Mwaliko (“we”, “us”) is an event-planning service that lets event hosts send invitations, collect RSVPs, check guests in by QR code, and collect michango (contributions). This policy explains what personal information we handle and why. It applies to our website at mwaliko.app and our Android and iOS apps.

• Account information — for hosts who sign up: name, email address, and authentication details (including Google sign-in if used).
• Guest information — names and phone numbers that a host adds to their guest list, plus RSVP responses and check-in status. Hosts provide this information about their guests.
• Event information — event details, invitation cards, messages, and contribution records you create.
• Payment information — michango contributions are processed by our payment provider (ClickPesa). We receive transaction records (amount, status, reference) but do not store full mobile money or card credentials.
• Camera — the QR check-in scanner uses your device camera only to read invitation QR codes. Camera images are processed on your device and are not uploaded or stored.
• Technical data — basic device and log information needed to operate and secure the service.

• To deliver invitations and reminders by SMS and WhatsApp.
• To record RSVPs and manage QR-based check-in at events.
• To process and reconcile michango contributions.
• To operate, secure, and improve the service.
• To comply with legal obligations.

We share data only with providers that help us run Mwaliko, and only as needed:

• Supabase — secure database and authentication hosting.
• Beem Africa — SMS delivery.
• Twilio (WhatsApp) — WhatsApp message delivery.
• ClickPesa — payment processing for michango.

We do not sell your personal information or that of your guests.

We keep event, guest, and contribution data while your account is active so you can manage your events. You can request deletion of your account and associated data at any time (see below). We may retain limited records where required for legal, accounting, or fraud-prevention purposes.

You may request access to, correction of, or deletion of your personal data, and you may ask us to stop sending messages. Hosts are responsible for having a lawful basis to add their guests’ contact details. To make a request, contact us at the address below.

Mwaliko is intended for adults organising events. It is not directed at children, and we do not knowingly collect data from children.

We may update this policy from time to time. We will post the updated version here and revise the “last updated” date above.

Questions or requests about your data? Email us at privacy@mwaliko.app.