POPIA Section 18 Processing Notice
Legal documents are reviewed by external counsel and refresh as the platform evolves.
Effective date: 2026-05-01 · Kioo Africa (Pty) Ltd
Responsible party
Kioo Africa (Pty) Ltd, trading as Muranga OS. Registered address: South Africa. Information Officer: privacy@muranga.earth. Information Regulator registration: pending — reference will publish here upon confirmation.
Purpose of collection
Personal information is collected to provide the Muranga OS platform services: multi-tenant ESG data management, Indigenous Knowledge System (IKS) ingestion and knowledge retrieval, LoRaWAN IoT telemetry processing, healer royalty accrual and disbursement, WhatsApp-based field interactions, and TNFD-aligned ESG reporting for corporate tenants.
Categories of data subjects and information processed
Corporate tenant users: name, work email, passkey credentials. Traditional healers: display name, region, mobile wallet reference, IKS contributions (text/audio), consent reference and date. Field agents: authentication tokens, GPS-tagged field observations. WhatsApp users: hashed phone number for routing, intent classifications. IoT nodes: telemetry readings (soil, sap flow, temperature, battery) linked to physical tree installations.
Recipients
Data may be shared with: Vultr (infrastructure, jnb1 ZA region); Stripe Inc. (billing reference only, DPA + SCCs in place); Meta Platforms (WhatsApp message delivery, minimal payload); HashiCorp Vault (key storage, same infrastructure). No personal information is shared with any other third party without explicit consent or a legal obligation.
Cross-border transfers
Stripe Inc. processes billing data in the United States. A Stripe Data Processing Agreement and EU Standard Contractual Clauses have been executed. Meta Platforms processes WhatsApp message metadata globally; message bodies contain no personal information. No other cross-border transfers occur.
Data subject rights
You may exercise your rights of access, correction, erasure, and objection by emailing privacy@muranga.earth. Responses will be provided within 30 days. You may also lodge a complaint with the Information Regulator at www.justice.gov.za/inforeg.
Questions? Contact our Information Officer at privacy@muranga.earth