Privacy Policy

What we collect

• Account info: email, password (stored hashed by our auth provider, never in plain text), name, WhatsApp number.
• Identity/ownership documents you choose to upload for verification (National ID, proof of employment, bank statements, proof of ownership) -- kept in a private storage vault, never shown publicly.
• Listing content you or a landlord publish: photos, descriptions, price, location.
• Messages sent through Musha's in-app chat, and reviews you submit.
• Approximate device location, only if you tap "Near me" and grant permission.
• Basic usage data (listing views, token/transaction history where applicable).

What we don't collect

We never see or store your card number, EcoCash PIN, or OneMoney PIN -- payments are processed directly by Payonify. We don't sell your data to advertisers or data brokers.

Who can see what

Your name and listing activity are visible to landlords/tenants you message. Uploaded verification documents are private by default -- they're only visible to you and Musha's admin team during review, or to a specific landlord/tenant you explicitly grant access to (and you can revoke that access at any time from your document vault).

Where it's stored

Musha runs on Supabase (database, authentication, file storage, and realtime messaging) and is hosted on Vercel. Both are third-party infrastructure providers bound by their own security practices; Musha does not run its own servers.

Your controls

• Delete any uploaded document from your vault at any time.
• Revoke a landlord's access to your documents at any time.
• Change your password from the account menu.
• Contact Musha to request account or data deletion.

Changes to this policy

If this policy changes materially, the "Last updated" date above will change accordingly.