Mboka ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our intelligence digest platform and related services (the "Service"). Please read this policy carefully. By using the Service, you agree to the practices described herein.
1. Information We Collect
Information You Provide
- Account Information: When you subscribe, we collect your full name, email address, and professional designation (e.g., job title or role).
- Topic Preferences: The topics you select to receive digests about (e.g., "Software Engineering," "Climate Action," "Fintech").
- Profile Updates: Any changes you make to your name, designation, or topic preferences through your profile page.
Information Collected Automatically
- Email Engagement Data: We track whether you open our emails and which links you click within digests. This data is collected through tracking pixels and link wrapping with UTM parameters.
- Usage Data: When you interact with the Mboka website, we may collect standard web analytics data including pages visited, time spent, browser type, and device information.
2. How We Use Your Information
We use the information we collect to:
- Deliver personalized weekly intelligence digests to your email based on your selected topics
- Improve and optimize our content curation and AI analysis algorithms
- Measure digest engagement (open rates, click-through rates) to assess content quality and relevance
- Communicate with you about your account, including sending magic link login tokens
- Detect and prevent fraud, abuse, or unauthorized access
- Comply with legal obligations
3. Email Tracking
We use Ahoy, an open-source analytics tool, to track email engagement. This includes:
- Email Opens: A small, transparent tracking pixel is embedded in our emails. When you open an email, this pixel loads and records the open event along with your email address, timestamp, and general location (city-level).
- Link Clicks: Links in our digests are wrapped to track which articles or resources you engage with. This helps us understand which topics and sources are most valuable to you.
You can opt out of email tracking by configuring your email client to block remote images, or by unsubscribing from the Service entirely.
4. How We Share Your Information
We do not sell your personal information. We may share your information only in the following circumstances:
- Service Providers: We use trusted third-party providers to deliver emails (SMTP2GO), power our AI analysis (Anthropic), and host our platform. These providers are contractually obligated to protect your data and use it only for the services they provide to us.
- Legal Requirements: We may disclose your information if required by law, regulation, or legal process, or to protect the rights, property, or safety of Mboka, our users, or the public.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy protections.
5. Data Security
We implement industry-standard security measures to protect your personal information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure, passwordless authentication via magic links
- Regular security audits and updates
- Access controls limiting who can view your data
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
- Active Accounts: We retain your name, email, designation, and topic preferences while your account is active.
- Email Tracking Data: Open and click data is retained for up to 24 months to enable analytics and trend analysis.
- Post-Unsubscription: When you unsubscribe, we delete your personal information within 30 days, except where we are legally required to retain certain records.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data, subject to legal retention requirements.
- Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
- Objection: Object to the processing of your data for certain purposes.
To exercise any of these rights, contact us at privacy@dnrstudios.co.ke. We will respond within 30 days.
8. Cookies and Local Storage
Mboka uses minimal cookies and browser local storage for essential functionality, including:
- Session management for your login state
- Remembering your preferences
- CSRF protection tokens
We do not use advertising cookies or share cookie data with third-party advertisers.
9. Children's Privacy
The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We will notify you of material changes by email or through a prominent notice on the Service. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
11. Governing Law
This Privacy Policy is governed by the laws of Kenya. Any disputes arising from this policy shall be resolved in the courts of competent jurisdiction in Nairobi, Kenya.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact:
Mboka by DNR Studios
Email: privacy@dnrstudios.co.ke
Website: mboka.dnrstudios.co.ke