Skip to content

Privacy Policy

Effective date: 1 August 2026

Mwenje ("we", "us", "our") runs the Mwenje website at mwenje.com and the Mwenje signage service you sign in to at app.mwenje.com. This page says what we collect, why we collect it, and what you can ask us to do about it.

Mwenje is operated by Anphase Limited, a New Zealand company, NZBN 9429041744017. Our registered details, including our registered office address, are on the public register at that link.

What this website collects

Nothing. The public pages at mwenje.com have no forms, set no cookies, and load no analytics, advertising or session-recording scripts. You can read every page here without telling us who you are.

One thing sits behind that. Our hosting and content delivery providers may keep standard server access logs, which record things like the IP address a request came from, the time, the page asked for and the browser your device reports. They exist to run and secure the service, we do not use them to build a picture of who you are, and none are kept for longer than 90 days.

What a Mwenje account collects

You give us personal information only when you create an account. Signing up asks for:

  • Your first and last name
  • Your email address
  • A username
  • Your organisation's name

We use it to create and identify your account, to send you the account emails the service depends on (address verification, invitations to join an organisation, password resets), to answer you when you ask us for help, and to keep the account secure.

We do not ask for a phone number or a postal address anywhere in the product.

What you put into the service

Running signage means storing what you schedule: the layouts you build, the images and media you upload, the schedules you write, and the record of what each screen played and when. That content is yours. We store and process it to run the service for you, and we do not use it for anything else.

Cookies

The public website sets no cookies.

Signing in to the app sets two cookies, both strictly necessary: a session cookie that keeps you signed in, and a cross-site request forgery token that protects the forms you submit. Neither is used for advertising or for tracking you across sites, and we set no others.

Who else handles your information

A small number of providers help us run Mwenje. Each handles your information only to provide its service to us, and only as far as running Mwenje needs. None of them may use it for anything of their own. They are:

  • Amazon Web Services runs the servers the app is on, stores the media you upload, and delivers this website. Everything you put into Mwenje sits on AWS infrastructure.
  • Amazon SES, part of AWS, sends the account emails: address verification, invitations, password resets. It handles your email address and the contents of those messages.
  • Neon runs the managed Postgres database that holds your account details, your layouts and your schedules.
  • Sentry receives a diagnostic report when something in the app goes wrong. A report can include the identifier of the signed-in account and the IP address the request came from, so we can tell whose session broke and fix it.
  • Cloudflare answers the DNS queries that point mwenje.com and app.mwenje.com at the service. It resolves names only. Your traffic does not pass through it, and it handles no account information or content.

If we add or change a provider that handles personal information, we update this list.

Where your information is stored

Mwenje runs on Amazon Web Services. The application server is in the AWS Asia Pacific (Sydney) region, ap-southeast-2. The media you upload, and some of the infrastructure that delivers this website, are in AWS regions in the United States. The database is a managed Postgres service that also runs on AWS. Backups are held by the same providers as the systems they come from, in the same regions.

Account email is sent through Amazon SES, from the Sydney region.

So your information is stored in Australia and the United States, and while it is there it is subject to the laws of those countries. Wherever it sits, we handle it under this policy and under New Zealand's Privacy Act 2020.

How long we keep it

  • Account information stays while your account is open. When the account is closed we delete it within 30 days.
  • Your content, meaning the media you uploaded and the layouts and schedules you built with it, stays available for 30 days after the account closes. In that window you can ask us for a copy, or ask us to put the account back. After it, we delete the content and it cannot be recovered.
  • Playback records, the log of what each screen played and when, are kept for 12 months and then deleted.
  • Backups roll over, so something you deleted can sit in a backup for a while after it is gone from the live service. Nothing stays in a backup for more than 30 days.

We keep information longer only where the law requires it, and only for as long as that requirement lasts.

Keeping it safe

Traffic to and from Mwenje is served over HTTPS. Passwords are stored as one-way hashes, never in a form we or anyone else can read back. No system is perfectly secure, so we will not claim ours is, but we treat your information as something we are holding on your behalf.

When we disclose it

We do not sell your personal information, and we do not share it for anyone else's marketing. We disclose it only where we are legally required to, or where it is genuinely necessary to protect the safety of people using the service.

Your rights

Under the Privacy Act 2020 you can ask us for a copy of the personal information we hold about you, ask us to correct it if it is wrong, or ask us to delete your account and the information in it. Email support@mwenje.com and we will respond as soon as we can, and within the time the Act allows.

If you are not satisfied with how we handle a privacy request, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Children

Mwenje is a product for businesses and organisations. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, email us and we will remove it.

Changes to this policy

If this policy changes, we post the new version on this page with a new effective date. It is worth a look now and then.

Governing law

This policy is governed by New Zealand law, including the Privacy Act 2020, and the New Zealand courts have jurisdiction over any dispute about it.

Contact us

Questions about this policy, or about the information we hold: