Privacy Policy

1. What we collect

We collect the following categories of data. Every category exists because the marketplace could not function without it.

• Account identity

  When you sign in with Google, we receive your Google user ID, your verified email address, your display name, and — if you have one — your Google profile photo. These become part of your MabunCrib profile.

• Contact information

  Your phone number, if you provide one. This is used so people you work with can reach you by WhatsApp or voice call. It is never used as a sign-in credential.

• Profile content

  The professional information you choose to add: title, about text, location, skills, experience, portfolio items, availability, and contact preferences.

• Marketplace activity

  Tasks you post, services you offer, jobs you publish on behalf of an organization, applications you submit, and reviews you give or receive.

• Messages

  The content of conversations you have with other people on MabunCrib. Messages are visible only to you and the person you are talking with.

• Verification evidence

  Documents you upload for verification — a government ID, a registration certificate, or a professional certificate. These are stored in a private bucket and shown only to the review team.

• Membership records

  The plan you chose, the payment method you used, the reference number, the proof you submitted, and the review outcome. This is the only payment workflow MabunCrib handles.

• Basic technical data

  Your browser's language, the page you visited, and error diagnostics. This data is anonymous or aggregated; we do not use it to profile you.

2. What we never collect

3. Why we collect it

Every piece of data we collect has one or more of these purposes:

• To operate your account. Sign-in, session management, and profile display.
• To run the marketplace. Tasks, services, jobs, applications, reviews.
• To enable contact. Letting people reach you by WhatsApp, voice, or in-app messaging.
• To build trust. Reviews and verification that help people decide who to work with.
• To review memberships. Approving or rejecting the optional platform subscription.
• To keep the platform safe. Reviewing reports and moderating content.
• To improve MabunCrib. Understanding which parts of the product are used and which are not — from anonymous, aggregated data only.

We do not use your data for any other purpose. We do not build profiles of you for advertising. We do not sell data.

4. Who sees your data

We do not sell or rent your data. We share it only in the following situations.

• With the people you interact with

  Someone who opens your profile sees your display name, avatar, title, location, about text, skills, experience, portfolio, reviews, and the parts of your contact information you have chosen to make visible.

• With the review team

  Verification documents, subscription proofs, and reports are visible only to authorized MabunCrib staff.

• With our infrastructure providers

  We use a small number of service providers to operate the platform (hosting, storage, authentication, email delivery). They process data on our behalf under contractual obligations to keep it confidential.

• When required by law

  If a South Sudanese court or a lawful authority requires it, we may have to disclose data. We will only do so when legally required.

• To prevent harm

  If we believe disclosure is necessary to prevent imminent harm to someone, we may share data with the relevant authorities.

5. Cookies & local storage

MabunCrib uses the smallest possible amount of browser storage.

• Session storage. Your Supabase authentication session is stored locally so you do not have to sign in on every page load.
• Local preferences. Things like your last-used filter, theme-independent UI preferences, and unsent form drafts are kept in your browser's local storage.
• No advertising cookies. We do not use third-party advertising cookies. We do not use fingerprinting. We do not track you across other sites.

You can clear all local data from Settings at any time.

6. How long we keep it

We keep your data for as long as your account exists, plus a limited retention period after you delete your account for legal and safety reasons.

7. Your controls

You have clear, self-service control over your data. From Settings you can:

If you have a specific concern about your data that Settings does not address, contact us using the details in section 12.

8. How we protect it

We take the security of your account seriously.

• Authentication is delegated to Google. We never store passwords.
• All traffic to and from MabunCrib is encrypted in transit.
• Data at rest is encrypted by our infrastructure provider.
• Verification evidence is stored in a private bucket with access controls.
• Administrative access is restricted to a small number of authorized staff.
• Every profile is protected by database-level rules that prevent one user from modifying another user's data.

No system is perfectly secure. If you believe your account has been compromised, sign out everywhere from Settings and contact us immediately.

9. International transfers

MabunCrib is operated from South Sudan. Our infrastructure providers may store data in data centres outside South Sudan. Wherever your data is stored, we require our providers to protect it to a standard equivalent to what we would apply ourselves.

10. Children

MabunCrib is not intended for children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, contact us and we will remove it.

11. Changes to this policy

We may update this policy from time to time. When we make a material change, we will notify you in-app and update the "Last updated" date at the top of this page. Continued use of MabunCrib after a change means you accept the updated policy.

12. Contact