Back to dashboard

Privacy Notice

Last updated: June 14, 2026

1. Who we are

the Ministry of Humanitarian Affairs and Disaster Management ("we", "us") operates the South Sudan Smart DRR platform and is the data controller for personal data processed through the Service.

2. Personal data we collect

  • Account data: name, email, hashed password, organisation.
  • Support & communications: messages you send us, feedback, community reports you submit.
  • Usage & telemetry: pages viewed, features used, API calls, error logs.
  • Device data: IP address, browser type, device identifiers, approximate location derived from IP.
  • Billing data: handled by Paddle (our Merchant of Record). We receive subscription status, plan, country and last-4 of the payment method — not full card details.

3. Why we use it (purposes & legal basis)

  • Provide and operate the Service, including authentication and access control — performance of contract.
  • Process payments, taxes and invoices via Paddle — performance of contract / legal obligation.
  • Detect fraud, abuse and security incidents — legitimate interests.
  • Improve features and forecast quality using aggregated usage data — legitimate interests.
  • Send service announcements; marketing only with your consent.

4. Sharing

We share personal data only with:

  • Paddle.com — our Merchant of Record, for checkout, subscription management, payments, tax compliance and invoicing.
  • Infrastructure subprocessors — hosting, database, email and analytics providers, under written data-protection terms.
  • Professional advisers — legal, accounting and audit, when needed.
  • Authorities — where required by law or to protect rights and safety.

We do not sell personal data.

5. Retention

We keep account data while your account is active and for up to 24 months after closure. Billing records are kept for the period required by tax law (typically 7 years). Server and security logs are kept for up to 12 months. After these periods data is deleted or anonymised.

6. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data; object to or restrict processing; request portability; and withdraw consent at any time. To exercise these rights, contact us through the in-app support channel. You may also complain to your local data-protection authority.

7. Security

We use appropriate technical and organisational measures including encryption in transit, encryption at rest for the database, role-based access controls, and audit logging. No system is perfectly secure, and we encourage you to use a strong unique password.

8. Cookies

We use strictly necessary cookies for authentication and session management. Optional analytics cookies are only set with your consent and can be cleared from your browser at any time.

9. Contact

Privacy questions can be sent to the Ministry of Humanitarian Affairs and Disaster Management at blueleafict@gmail.com.