1. Scope and who we are
This policy applies to the Mofuniwa website, iOS and Android apps, and services tied directly to your account. The operations console is restricted to authorized staff, and its handling of user data is governed by this policy. Descriptions of current features and data handling were corrected on 2026-10-19; the policy version and original effective date are unchanged.
Mofuniwa is for adults aged 18 and over. It is not directed to children.
2. Information we process
- Account and device data: email, verification status, device identifiers, sessions, language, push tokens, and necessary security logs.
- Profile and NOOK data: your nickname, avatar, bio, city, interests, adopted companions, care and growth records, and reminder settings. Cities come from a self-hosted city directory; the current app does not collect a birth date or birth time.
- Expression and historical content: AWAI posts, photos, videos, comments, small-thing invitations and participation states, and role names, avatars or related expression retained from earlier versions. Retained history does not mean birth-based role generation remains available.
- Wakaru and location data: current city discovery uses your selected or account city, linked to your account or invitation, without automatically requesting GPS. A Nearby interface retained for installed older clients can, after you explicitly enable it and provide location, round coordinates to 0.05-degree increments and store them with your account for legacy nearby display. Precise coordinates are not written to location records. Legacy nearby visibility expires after 24 hours; current city discovery does not require old channels or a 5 km radius.
- Messages and safety data: mutually accepted conversations, read state, reports, blocks, appeals, and evidence snapshots tied to safety events.
- AI assistance: when you actively use an assistant feature, the current draft or selected content context may be used to generate suggestions, together with your nickname and a summary of your NOOK companion. The AI audit table stores task type, a request fingerprint without user content, provider/model and completion state, not drafts, prompts, content digests or generated text. Content you confirm for publishing or sending is stored by that feature.
- Support requests: the contact email, category, subject, description, ticket number and handling status you submit through the Support Center. Requests from a signed-in client may also be linked to your account and technical context such as app version, operating system version and device model.
- Service data: crash, performance, request status, abuse signals, and diagnostics that do not contain message text.
3. Why we process it
- Create and protect accounts, deliver email codes, and keep device sessions consistent.
- Provide NOOK adoption, care, growth records and the reminders you set.
- Support AWAI expression and city-based discovery of public NOOK companions, small-thing invitations and contactable people.
- Provide consent-based messaging, offline delivery, read sync, and notifications.
- Prevent harassment, fraud, impersonation, and abuse; handle reports and appeals; maintain operator audits.
- Measure registration, first expression, meaningful response, and return use to improve the core experience—not to sell advertising profiles.
4. AI assistance and automation
The current app no longer generates roles from birth details. NOOK growth and care states support everyday companionship and records. They are not used for medical, legal, financial, employment, education, insurance or other high-impact decisions, and never decide a relationship for you.
When an AI provider is configured and you actively use an assistant feature, AI can help draft AWAI expression, connection openings, messages, event plans or reflections for the current task. Generative AI cannot independently select candidates, make final safety decisions or dispose of an account.
These assistant features produce editable drafts only. You must choose and separately confirm any send or publish action; AI never acts on your behalf.
6. Retention and deletion
We keep information while your account is active and as needed to provide the service. After content or account deletion, online copies are removed or de-identified; interactions lawfully retained by others and necessary safety evidence remain subject to this policy. Access-restricted disaster-recovery backups expire through their regular rotation.
Legacy Nearby visibility expires 24 hours after the last explicit activation; opting in again refreshes it. Leaving visibility stops display immediately. Expiry or leaving visibility does not by itself physically delete the underlying approximate-coordinate record. You may request data or account deletion under this policy.
First-party evidence snapshots created from reports are retained for 90 days by default. Law, an active appeal, or a serious safety risk may require longer restricted retention. Codes and short-lived security tokens are retained only as long as verification and abuse prevention require.
Support tickets and handling records are kept for follow-up, audit and repeat-abuse prevention. A uniform automatic cleanup period is not currently configured. You may request access, correction or deletion through the Support Center; records needed for legal duties or an unresolved safety matter may remain under restricted access.
7. How we protect information
- Provider keys and push tokens use AES-256-GCM application-layer encryption.
- Precise location and private message text are excluded from ordinary operations analytics; privileged access is minimized and audited.
- Our first-party IM separates authorization, persistence, and real-time delivery; every conversation requires server-side relationship authorization.
- We use rate limits, device revocation, reporting, evidence hashes, and dependency security scanning.
8. Your choices and rights
- Access and correct account, NOOK and public profile information, and request access or correction of retained historical information.
- Withdraw nearby visibility, notifications, or permissions without affecting earlier lawful processing.
- Delete AWAI content, conversation relationships or the entire account, and request deletion of retained historical personal information.
- Export portable information and request an explanation of material account actions.
- Appeal account or content actions; the Safety Center remains available to restricted accounts.
- Exercise access, correction, deletion, restriction, objection, or complaint rights available under local law.
9. Updates and contact
We will update this policy when data uses, product scope, or applicable law materially changes. Material changes will be communicated in the app or by registered email before they take effect.
Submit privacy, data, or safety requests through the website Support Center without signing in and receive a ticket number. The app also retains a Settings → Help & Safety Center entry. Do not post identity documents, exact addresses, or other highly sensitive data in public AWAI content.