1. Who we are and what this policy covers
MNF, based in Palestine, operates under the MNFCode brand ("we", "us"). This policy covers mnfcode.com and our Dukkan (دكّان) and Dafter (دفتر) applications, on the platforms where each is available. Privacy enquiries: support@mnfcode.com.
Dukkan and Dafter are currently in development. This notice describes the service features and privacy commitments for their releases; a listed feature is not a statement that it is already available. No AI voice, analytics, or crash-reporting processor may receive app data until its identity and processing details have been disclosed and the required controls implemented.
2. Information we process
- Account and business profile: name, email, optional phone number, account ID, business name, settings, and authentication/session information necessary for the account.
- Dafter records: customer/supplier details you enter, debts, payments, balances, cashbook entries, dates, notes, attachments, and correction history.
- Dukkan records: product/catalog and stock information, sales and related business entries, customer/supplier details, notes, attachments, and reports when those features are enabled.
- Team information: invited email addresses, memberships, roles, permissions, and the identity of the person performing a recorded business action.
- Subscriptions: product/plan IDs, transaction or receipt references, purchase/renewal status, and subscription entitlements. Apple/Google process store payment details; our subscription integration does not require your full payment-card number.
- Optional media and voice: photos/files you choose, microphone audio, transcripts and extracted draft commands when you explicitly use the corresponding feature. Selected customer names and transaction context may be included in AI processing only after the feature-specific disclosure and consent.
- Technical information: IP address, operating-system/app version, device characteristics, error logs, crash traces, and feature interactions needed for security, diagnosis and permitted analytics. Do not place ledger contents, raw voice, passwords or receipt attachments in analytics/crash events.
- Support communications: messages and attachments you choose to send to support. Include only what is needed for your enquiry.
3. Why we use information
We use information to operate accounts, maintain business records and balances, synchronize devices, deliver requested backups and exports, manage team access and subscriptions, process requested voice drafts, respond to support, prevent abuse, and diagnose and improve reliability. Where applicable, processing is based on providing the requested service, your consent for optional processing, legitimate operational/security interests, or legal requirements. A privacy notice is not itself consent to microphone access, AI disclosure, analytics, or tracking.
4. Offline storage, synchronization and backups
Records may be stored locally for offline use. With account/cloud features enabled, authorized records and attachments are transmitted to our backend to synchronize or recover your business. Synchronization and backup are different: unsynchronized changes on a lost device may not be recoverable. Drive/iCloud backup is optional and uses a provider account you connect. Only the access needed for the backup feature should be requested; disconnecting it stops future access but does not erase existing files. Team owners and authorized members can access business records according to their permissions. Removing a disconnected member cannot immediately remove copies already cached on that device.
5. Service providers and disclosures
- Supabase: account authentication, backend database, storage and synchronization infrastructure; receives account identifiers and cloud-enabled business records/attachments needed for those services.
- RevenueCat: purchase validation and subscription entitlements; receives app/account identifiers, purchase references and relevant technical purchase data. Apple App Store and Google Play independently process store transactions.
- Google Drive / Apple iCloud: receive backup contents and related metadata only when you connect and use that destination, subject to the relevant provider and account settings.
- Spaceship/Spacemail: host this website and handle support email, including ordinary hosting access logs and messages you send. Google Fonts receives connection information when website fonts load.
- AI voice and analytics/crash reporting: provider selection is not yet finalized. These app integrations must remain disabled until the provider names, data categories, purposes and retention are added to this policy and shown through any required in-app disclosure. AI transmission requires explicit permission before audio or business context leaves your device.
We require service providers acting for us to protect data consistently with this policy and applicable requirements and to process it only for agreed purposes. We may disclose necessary information to comply with a valid legal obligation or protect users and the service. We do not sell customer ledger records or use their contents for advertising. User-requested exports/sharing and business/team access are separate disclosures initiated or authorized by you.
6. Permissions, voice and your choices
- Microphone: requested when starting voice entry, with manual entry available. Recording is not a background surveillance feature. Review the transcript, person, amount, currency and debt/payment direction before confirming any AI draft.
- Camera/photos/files: requested when you choose to capture or attach an item; use limited system pickers where possible. The policy does not authorize uploading your entire photo library or address book.
- Notifications: optional for reminders. Permission can be changed in device settings. Cloud-provider connections and optional analytics/AI choices can be withdrawn through the relevant account/app/device settings; this does not undo processing already lawfully completed.
7. Retention and deletion periods
- Account and synchronized business records: retained while needed to provide the active account and the features you use, unless you delete them sooner.
- Verified account/data deletion requests: we delete the requested personal data from active systems within 30 days. We verify ownership using the existing account or registered email; do not send passwords or identity documents.
- Residual copies in service-operated backups expire within 90 days after deletion from active systems. Access is restricted and these copies are not used for normal operations. If a backup is restored, deletion must be reapplied before the restored data is used.
- Legal exceptions: information specifically required by applicable law, a valid legal hold, or a documented fraud/security investigation may be retained only as necessary for that purpose. We explain applicable exceptions and restrict use; they are not a blanket reason to keep the whole account.
- Google Drive/iCloud files, exported statements, shared documents, and copies on your devices are separate. You must remove copies you control, including provider trash or recently deleted folders. Deleting an app account does not automatically delete those independent files.
8. Access, correction and account deletion
You can request access, correction, export, deletion of specific data, or deletion of the whole account. Use the in-app account-deletion option in releases supporting accounts, or the external deletion instructions below if you cannot access the app. Removal from a team is not account deletion. A team/business administrator may control business records; we identify ownership and any specific lawful retention instead of treating all shared data as permanently exempt. Where applicable you may also object to processing, restrict it, withdraw consent or raise a concern with the relevant authority.
Request account or data deletion →
Deleting an account does not itself cancel an Apple/Google subscription. You can request deletion immediately even if a paid period remains; manage future renewals separately through your store account.
9. Security and international processing
We use protected network connections, authentication and authorization controls, scoped business access and restricted administrative access. No system can guarantee absolute security. Service providers may process data outside Palestine, according to their configured regions and applicable transfer safeguards. We do not claim all records remain in your country, end-to-end encryption, or a certification not independently established.
10. Children
These are business/productivity services, not services directed to children under 13. Do not create an account without the legal capacity or required authorization to use the service. If you believe a child supplied personal information improperly, contact us so we can investigate and remove it where appropriate.
11. Website and policy updates
This website stores language/theme preferences in your browser. Its contact form opens an email draft and does not itself submit it to a server. Email providers process a message only if you send it. This website currently has no account signup, payment checkout, advertising trackers or analytics scripts. We update this notice when processing changes, identify the effective date, and provide additional notice or consent where required before a new use begins.
Contact MNFCode
MNF · Palestine · support@mnfcode.com