1. Data controller
The data controller is Execut S.A.R.L, publisher of Kisalu, based in Kinshasa, Democratic Republic of the Congo.
To exercise your rights or ask a question: the Contact us form on the website and in the app, or the contact email published in site settings.
2. Data we collect
Account and identity: name, phone number, email, gender, profile photo, language, country.
Provider profile: business name, description, services, geographic area (country, province, city, commune), portfolio, blog posts, validation documents.
Location: city or commune you enter and, if you allow it, the approximate device position to show nearby providers. We do not continuously track you in the background.
Communications: messages, attachments (images), reviews, comments, reports and Contact us messages.
Payments: transaction id, amount, status, selected method. Card or wallet details are processed by the payment provider and are not stored in full by Kisalu.
Device and notifications: push token (Firebase Cloud Messaging), device type, limited technical logs (errors, security).
Usage: searches, favourites and pages needed to operate and secure the service.
3. How data is collected
You provide it (sign-up, profile, messages, photos taken or chosen from the gallery).
It is collected automatically when the service runs (SMS OTP, push tokens, technical logs).
It may come from technical providers (SMS operator, payment gateway, Firebase) only to deliver the requested feature.
4. Purposes
Create and secure your account (SMS verification).
Show the directory, search and matching.
Provide messaging, reviews, the blog and notifications.
Process subscriptions, sponsoring and ads.
Moderate content, prevent fraud and comply with the law.
Improve app stability. We do not sell your data and do not use your personal data for third-party personalised advertising outside Kisalu.
5. Sharing
Hosting and technical infrastructure.
SMS delivery (OTP codes).
Firebase (push notifications).
Payment providers to collect subscriptions and ads.
Competent authorities if the law requires it.
Provider profile information you publish is visible to Kisalu users. Private messages are not public.
6. App permissions
Internet: load the app and API.
Location (approximate / precise): suggest providers near you. Optional; city search still works if you refuse.
Camera and photos: profile photo, portfolio, attachments. No photo is uploaded without your action.
Notifications: message and review alerts. You can disable them in phone settings.
7. Retention
Account data is kept while the account is active.
After deletion, we may retain some information for the period required by law (accounting, security, disputes), then erase or anonymise it.
Technical logs are kept for a limited time needed for diagnostics.
8. Security
We apply reasonable measures: authenticated access, HTTPS, OTP codes, admin access control. No system is infallible; report incidents through contact.
9. Children
Kisalu is not directed at children under 13. We do not knowingly collect data from children below that age. If a parent finds such an account, contact us to delete it.
10. Your rights
You can view and edit much of your profile in the app.
You may request access, correction, restriction or deletion of your data, or an export of reasonably available information, by writing to us.
If an applicable law (for example in the European Economic Area) grants extra rights, we will honour them on a substantiated request.
11. Transfers
Servers and some processors (SMS, payments, Firebase) may be located outside your country. By using Kisalu you accept that transfer as needed for the service, with the reasonable safeguards available.
12. Changes
This policy may be updated. The date at the top of the page prevails. For a material change we may notify you in the app or on the site.