Privacy Policy — CondeDynamics

This policy explains what personal data CondeDynamics collects, why we use it, who we share it with and what choices you have. It covers our website, the customer portal, and our two products: Swift (shops, pharmacies, restaurants) and Prime (schools).

In short: we collect what we need to answer you, bill you and run Swift and Prime. The data your business or school keeps inside Swift and Prime is yours, and we handle it only to run the service for you. We do not sell personal data, and this website has no advertising or analytics trackers. We take extra care with pupils' data.

1. Who is responsible for your data

CondeDynamics, SU, Lda ("CondeDynamics", "we"), tax ID (NUIT) 401 951 881, Av. Eduardo Mondlane, Nampula, Mozambique. We have two different roles, depending on the data:

Our role	Which data	Who decides how it is used
Controller	Website visitors and enquiries; portal accounts and sign-in; contracts, billing and payments; support requests and visits; our own staff.	We do.
Processor	The data a business or school keeps inside Swift or Prime: customers, suppliers, employees, pupils, guardians, sales, stock, fees and so on.	The business or school (our Client). We process it on its instructions.

If you are a customer of a shop, or a parent or pupil at a school, that uses our products, the shop or school is responsible for your data. Please contact them first; we will help them answer you.

2. What we collect

Where	What	Where it comes from
Website enquiry	Name, phone number, email (optional), business name, business type, city, message, product of interest, and a record that you agreed to be contacted.	You.
Portal account and sign-in	Name, email, phone number, password (held in protected form by our authentication service), the businesses or schools you create (name, type, tax ID, address, contacts), plan and billing status.	You.
Billing and payments	Invoices, amounts, dates, payment method and reference, and the phone number used for mobile-money payments.	You, your payment provider and our records.
Support, installation and visits	Support tickets, calls and WhatsApp messages, records of installations, training and visits, and names and contacts of your staff.	You and our agents.
Technical data	IP address and basic request logs, app version (for updates), and security logs of actions taken inside the apps (who did what, and when).	Your device and our systems.
Inside Swift (as processor)	Customers (name, phone), sales, stock, suppliers, employee and payroll records, user accounts and audit logs.	Our Client.
Inside Prime (as processor)	Pupils (name, date of birth, admission number, photo, nationality, previous school, blood group, medical conditions, grades, attendance, behaviour and teacher comments); guardians (name, relationship, phone, email, occupation, workplace, ID type and number); authorised pickup persons (name, photo, relationship, ID number, QR code); teachers and staff; fee and payment records.	Our Client (the school).

Schools decide what to record about pupils. We recommend recording medical information only where it matters for the pupil's safety.

3. Why we use it, and on what basis

Purpose	Basis
Answer enquiries and arrange demos	Your request, and your consent to be contacted
Set up, provide and support the Services, and manage your account	Performing our agreement with you
Bill, collect payment and keep accounting records	Performing our agreement, and legal obligations
Send service messages: invoice reminders, maintenance notices, suspension warnings	Performing our agreement
Keep the Services secure, prevent fraud, keep audit logs	Our legitimate interest in protecting the Services and our clients, and legal obligations
Fix errors and improve the Services, using technical data	Our legitimate interest
Comply with the law and respond to lawful requests	Legal obligations

We do not use personal data for advertising, we do not sell it, and we do not take decisions with legal effect about people by automated means. We contact you about our products only if you asked us to, or, if you are a client, about services like the ones you already use. You can tell us to stop at any time.

4. Children's data and schools

Prime processes children's data on behalf of schools. Each school decides what it collects, and is responsible for having a lawful basis, for obtaining parents' or guardians' consent where the law requires it, and for informing families.

We use pupils' data only to provide Prime to their school. We never use it for advertising, profiling or marketing, and we share it only with the providers needed to run the service (see "Who we share it with"). Pupils' photos, and the photos, ID numbers and QR codes of authorised pickup persons, are used to run attendance and safe pickup. Access inside Prime depends on each person's role.

This website is not directed at children.

5. Who we share it with

We do not sell personal data. We share it only with the providers below, who help us run the Services, and only as much as each feature needs.

Provider	What for	What it receives
DigitalOcean	Cloud hosting; storage of uploaded files (photos, documents) and installers	Data held in the Services. Data centres include Frankfurt, Germany.
Google Firebase Hosting	Serves this website	Technical request data such as your IP address
Mailgun	Sends emails from the Services (invoices, notices, password resets)	Recipient email address and message
Infobip and Twilio , and mobile network operators	Deliver SMS messages	Recipient phone number and message text
Vodacom M-Pesa	Mobile-money payments	Payer phone number, amount and reference
Your bank or mailbox provider	Only if you connect a mailbox to Prime to read bank payment reports	Access you grant to that mailbox

Our own back-office and authentication systems, which we operate ourselves, hold the account, contract, billing and support records described above.

We may also share data with authorities when the law requires it, with lawyers or accountants who are bound by confidentiality, and, if our business is ever transferred, with the new owner, who must keep to this policy. Our staff and agents access client data only as their job requires, by role, and that access is logged.

6. Where data is processed

Our main storage is in Frankfurt, Germany. Some providers above process data in other countries, including the United States. We choose providers that commit to protecting data, and we send them only what a feature needs.

7. How long we keep it

Data	How long
Enquiries that do not become a contract	12 months after our last contact, then deleted
Contracts, invoices, payments and support records	For the whole agreement plus at least 1 year, and longer where accounting law requires
Client data inside Swift and Prime	While the agreement runs. After it ends, you can ask for an export within 30 days; after that we may delete it
Portal account	While the account is active; deleted on request unless we must keep billing records
Security and audit logs	As long as needed for security and to settle disputes

Deleted data can remain in backups until they are overwritten in the normal cycle.

8. How we protect it

Separation. Each client's data is kept apart from every other client's, so one client cannot see another's.
Encryption in transit. The website and the Services use HTTPS.
Roles and logs. Every person has their own account and a role that limits what they can see and do, and actions inside the apps are logged.
Passwords. Only our authentication service holds passwords, in protected form. Our staff never ask you for yours.
Our people. Staff see client data only as their job requires, lose access the same day they leave, protect their devices, and are not allowed to copy client data to personal devices, email or cloud accounts.
Field agents. You can verify an agent's badge inside Swift or Prime, and we collect payments only through official channels.
Incidents. If a breach affects a client's data, we tell that client without undue delay so it can meet its own duties.

One limit you should know about: files uploaded to the Services (for example pupil photos, logos and attachments) are kept in cloud storage and served through a content delivery network at long, random addresses. Access inside the app follows roles, but the file address itself is not password-protected, so anyone who has the exact link can open that file. Do not share these links, and do not upload documents more sensitive than the service needs.

No system is perfectly secure, but we work to keep yours safe.

9. Your rights and choices

You can ask us to give you a copy of your personal data, correct it, delete it, limit how we use it, or send it to you in a usable format. You can object to a use based on our legitimate interest, and withdraw a consent you gave, at any time.

To use these rights, email info@condedynamics.com or call +258 84 354 5858 / +258 86 354 5858. We may need to check who you are first, and we answer as soon as we can and within 30 days.

If your data is inside a client's Swift or Prime, we will pass your request to that client, who decides how to respond, and we will help.

You may also complain to the data-protection or consumer authority in your country.

10. Cookies and similar storage on this website

This website sets no cookies. It stores a few small items in your browser's local storage:

Item	Purpose	How long
Language (preferredLanguage)	Remembers the language you chose	Until you clear it
Theme (theme)	Remembers light or dark mode	Until you clear it
Sign-in session	Keeps you signed in to the customer portal, only after you sign in	Until you sign out or the session expires

We use no advertising cookies, third-party analytics or social-media trackers. Fonts are hosted by us. The website is delivered through Google Firebase Hosting, which processes technical data such as your IP address to serve pages. The Swift and Prime apps similarly store your sign-in and preferences on your device.

11. Changes to this policy

We may update this policy. We publish the new version here with its date, and we tell clients about material changes by email or inside the Services.

12. Contact us

CondeDynamics, SU, Lda, Av. Eduardo Mondlane, Nampula, Mozambique.

Email: info@condedynamics.com . Phone / WhatsApp: +258 84 354 5858 / +258 86 354 5858.

The rules for using our Services are in our Terms of Service .