Privacy policy

Information we collect

Depending on your role and the features you use, MKAWA may collect:

• Account and contact information: name, email address, phone number, preferred language, organisation and app role.
• Pump and warranty information: pump model and serial number, dealer and customer sale details, invoice number and date, invoice proof, warranty status and review notes.
• Service information: service address, problem description, ticket history, technician or service-centre assignment, visit notes, parts, labour, estimates, payment status and service proof files.
• Support and security information: notifications, access and audit events, and privacy-minimised app diagnostic references containing a reference number, affected screen, category, platform and app version.
• Deletion-request information: the registered contact detail, request status and verification correspondence needed to complete an account deletion request.

MKAWA does not ask you to send passwords or one-time passwords to support staff. The current app does not request access to your contacts, precise location, call log or SMS inbox.

How we use information

• Create and secure your account and show the correct customer, dealer, service or MKAWA staff experience.
• Verify serialized pumps, customer invoice dates and warranty eligibility.
• Accept, assign, carry out and preserve the history of warranty-covered and paid service requests.
• Send account verification, OTP, invitation, ticket and service-status communications.
• Prevent duplicate or fraudulent registrations, investigate errors, maintain audit records and protect users and MKAWA.
• Meet applicable warranty, tax, accounting, dispute-resolution and legal obligations.

Who processes the information

Access inside MKAWA is restricted by verified role. A customer sees their records; a dealer sees records connected to that dealership; assigned service teams see the details needed for their jobs; authorised MKAWA owners and administrators oversee operations.

MKAWA uses service providers only to operate the app: Supabase for authentication, database and private file storage; Resend or MKAWA's configured mail provider for email; MSG91 with India's DLT ecosystem for phone OTP and operational SMS when production SMS is enabled; Vercel for MKAWA website and server endpoints; and Expo/EAS for Android app build and delivery tooling. These providers process data on MKAWA's behalf under their own security and privacy terms.

We do not sell personal information or use app records for third-party advertising.

Storage and security

MKAWA uses encrypted network connections, private file storage, role-based database controls and audit trails. Invoice and service proof files are not public. Provider credentials and administrative keys are kept outside the Android app.

No system can guarantee absolute security. If you believe your account or data has been misused, contact MKAWA immediately.

Retention and deletion

MKAWA's current retention schedule keeps invoice, payment, warranty, service and linked evidence records for up to eight years; the minimal account-deletion receipt and material audit evidence for up to seven years; privacy-minimised app diagnostics for 90 days; and ordinary in-app notifications for 180 days. Unattached or abandoned uploads are scheduled for removal after 30 days. A record may be held longer only while a warranty, dispute, investigation, legal hold or applicable law requires it.

Encrypted recovery backups rotate through 35 daily, 12 monthly and 8 annual recovery points. Deletion from the live service therefore ages out of protected backups under that rotation instead of rewriting historical recovery media.

You can request account deletion inside the MKAWA app under Account → Delete MKAWA app account, or use the public account deletion page. After ownership verification, the login account and personal data that is no longer necessary will be deleted or anonymised. Limited invoice, warranty, service, payment, audit, fraud-prevention or legally required records remain restricted and are removed or anonymised when the applicable period ends.

Your choices

You may ask MKAWA to explain, correct or delete your personal information. Some product and service functions cannot operate without the information required to identify the pump, decide warranty or fulfil a service request.

Do not upload unrelated personal documents. If an invoice or service proof contains unnecessary information, redact it before upload where appropriate.

Children

The MKAWA app is designed for adult customers and authorised business users and is not directed to children.