Privacy Policy

1. Introduction

Welcome to Musa Security App ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

By using Musa, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Account Information: Name, email address, phone number, and role (resident, guard, or administrator)
• Authentication Data: Password (encrypted), authentication tokens, and session information
• Profile Information: Estate assignment, household membership, and user status

2.2 Usage Information

We automatically collect:

• Access Logs: QR code scans, access code generation, and verification activities
• Security Events: Login attempts, authentication events, and security-related actions
• Device Information: Device type, operating system, app version, and unique device identifiers
• Activity Data: Feed posts, comments, likes, and community interactions

2.3 Camera and Storage Permissions

We request camera access for QR code scanning (guards only) and storage access for saving QR codes. These permissions are optional and only used for their stated purposes.

3. How We Use Your Information

We use your information to:

• Provide and maintain our security access control services
• Authenticate users and manage access permissions
• Generate and verify access codes and QR codes
• Facilitate household management and member invitations
• Enable community features (feed, messaging, notifications)
• Monitor and log security events for estate safety
• Send important notifications about access requests and approvals
• Improve our services and develop new features
• Comply with legal obligations and enforce our terms

4. Data Storage and Security

4.1 Firebase Services

We use Google Firebase services for data storage and authentication. Your data is stored on secure Firebase servers with industry-standard encryption. Firebase complies with GDPR, CCPA, and other privacy regulations.

4.2 Security Measures

• End-to-end encryption for sensitive data
• Secure authentication with Firebase Authentication
• Role-based access control (RBAC) for data permissions
• Regular security audits and updates
• Encrypted data transmission (HTTPS/TLS)
• Password hashing and secure token management

4.3 Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Security logs and access history are retained for 90 days for security and compliance purposes. You may request deletion of your account and data at any time.

5. Data Sharing and Disclosure

5.1 Within Your Estate

Your information is shared within your assigned estate according to your role:

• Guards: Can verify access codes but cannot see resident names or personal details
• Residents: Can see estate feed posts and household member information
• Administrators: Have access to user management and estate-wide data

5.2 Third-Party Services

We use the following third-party services:

• Firebase (Google): Authentication, database, and cloud storage
• Netlify: Web hosting and deployment

These services have their own privacy policies and we encourage you to review them.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect the rights, property, or safety of Musa, our users, or others.

6. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a portable format
• Opt-Out: Unsubscribe from non-essential notifications
• Restriction: Request limitation of data processing

To exercise these rights, contact us at privacy@musa-security.com

7. Children's Privacy

Musa is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using Musa, you consent to such transfers. We ensure appropriate safeguards are in place to protect your information.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain user sessions and improve user experience. You can control cookie preferences through your browser settings. Essential cookies required for authentication cannot be disabled.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

12. Regulatory Compliance

Musa complies with applicable data protection regulations including:

• General Data Protection Regulation (GDPR) - EU
• California Consumer Privacy Act (CCPA) - USA
• Personal Information Protection and Electronic Documents Act (PIPEDA) - Canada
• Nigeria Data Protection Regulation (NDPR)