Privacy

Version 0.9 · published 1 September 2026 · pending review by a Zimbabwean lawyer — that review may amend this page. Every claim below describes what the product actually does; an automated check compares this page's claims against the code.

What we collect, and why

Your name, phone number and unit — entered when your estate registers you. The phone number's purpose is stated on the screen that collects it.

The tickets you file — category, description and dates. That record is the product.

Reviews you leave — kept permanently and linked to the resolved ticket they rate. They are the provider's work record.

Your tenancy and lease — which unit, which dates, what rent and deposit were agreed. A renewal is a new record, so last year's terms stay readable.

Rent charged and paid — amounts, dates, and how you say you paid, in your own words ("EcoCash", "cash to the caretaker"). Naming a channel is not integrating with it: no card number, no bank detail, no payment credential, ever.

What the estate spent — amount, date, category, and the manager who recorded it. No resident is named on an expense.

Photos you choose to attach — work evidence on a ticket, or proof of a payment. Attaching is your choice and never a condition. Files are size-capped and stored where the web cannot reach them directly. A PDF slip is read on our own server only, to say whether it mentions the amount and date you claimed — nothing about it is sent anywhere, and images are never machine-read at all.

If you ask about a vacancy — the name you give, one way to reply, and your question. No account is created, nothing tracks you, and what you sent is deleted 90 days after you send it.

Usage counts — which screen answered and when. Never who: the table structurally cannot hold a user reference.

We do not collect: national ID numbers, payment card details, bank credentials, location, or your device's contacts.

Who sees what

You see your own tickets — never another unit's. A provider sees your contact details only after being assigned to your ticket. Managers see their own estate's records and no other estate's.

Your rent record is seen by you and by the manager or owner of the estate you live in. Nobody else. A proof of payment is tighter still: you and your landlord, and not the estate's committee.

The estate's cash book, and the spreadsheet it exports, carry no resident's name. Arrears is totals, never a list of who.

An inquiry about a vacancy is seen by the estate that listed it, and by nobody else. There is no way to browse estates — the code cannot write that query.

Your record does not travel. There is no tenant score, no rating of you as a person, and no way for a landlord who has never housed you to look you up. That is structural, not policy.

The app makes no requests to third-party servers — fonts, scripts and styles come only from Nharaunda. We do not sell or share personal data with anyone.

Where the server is

Huawei Cloud, Johannesburg, South Africa. Under Zimbabwe's Data Protection Act that is a cross-border arrangement, and it is stated here so nobody has to discover it. The consent wording for it is one of the questions with the lawyer below.

Keeping and deleting

Tickets and reviews last the life of the estate's account — they are the estate's operational record and the provider's work history.

Rent records, expense records and payment proofs are never deleted or edited — not by us, not by your landlord, not by anyone. A correction is a further entry. That protects you: a landlord able to delete a payment claim could delete the proof you paid.

Vacancy inquiries delete themselves 90 days after they are sent.

You can request removal from your home screen. Your name and phone number are removed and the request is logged; the estate's records of what happened keep their dates and amounts with your identity gone.

Money, plainly

Nharaunda never holds your money. Rent is recorded, not collected: you pay your landlord directly, and we write down that you said so and that they confirmed it. There is no balance, wallet or escrow anywhere in the system — a test fails if one ever appears.

A rent record is a record of what each side said, not a judgment. An unconfirmed payment shows as a claim awaiting confirmation. Disputes are between you and your landlord; what we offer either of you is the record.

Providers, ratings and terms

Service providers are independent people, not our employees or agents. Work agreed on the job board is agreed between the estate and the provider.

"Verified" means exactly one thing: an estate manager has vouched for this provider. It is not a guarantee of work quality.

Ratings are computed from residents' reviews of resolved tickets. We cannot edit them — there is no override to use.

Security, stated without decoration: HTTPS in transit, hashed credentials, role-scoped access. Accounts belong to the estate; a resident who leaves is deactivated by their manager. Governing law is Zimbabwe.

Your rights

A copy of your data: every role's home screen carries "My data" — the export includes your tickets, tenancy, lease and the full rent ledger, downloaded as a file you keep.

Removal: the request lives beside it, in your own words, and you may withdraw it until it is actioned.

Still with the lawyer

These questions are open, and this page does not pretend otherwise: the lawful-basis mapping for each data category; whether anonymisation satisfies the Act's erasure right, in general and for financial records; the consent wording for cross-border hosting; whether we must register with POTRAZ as a data controller; and whether a data protection officer must be designated at our scale.

None of these change what the system does. They may change how this page says it.

Who we are

The data controller is Aither Labs (Private) Limited, Reg. 69059A02112025, Harare, Zimbabwe.

Data matters: info@aitherlabs.africa

Complaints may be escalated to POTRAZ, the data protection authority.