MaankulanMaankulan

Trust, Security & Privacy

This page is maintained by Maankulan to answer common security and privacy questions about our app. It describes the controls and practices currently in place. Security is a shared responsibility: our hosting platform secures the underlying infrastructure, we configure and operate the application, and you help by keeping your login credentials private.

Access & authentication

  • Every account signs in through our managed authentication system using email and password or supported social sign-in.
  • Sensitive areas — such as the admin dashboard, finance, orders, and customer records — require an authenticated session and role-based permissions before any data is shown.
  • Staff and administrators only see the data their role allows; customers can only view their own profile, orders, and wallet activity.

Data protection

  • Traffic between your browser and our app is served over encrypted HTTPS connections.
  • Access to records in our database is enforced server-side with row-level security rules, so a request can only return the rows the signed-in user is permitted to see.
  • Administrative and financial actions are validated on the server, not just in the browser.

Data we collect & how it is used

  • We collect the information you provide to operate the service: your name, contact details, optional National ID, orders, bookings, payments, and wallet balance.
  • This data is used to process your orders and reservations, manage your account and credit, and provide customer support.
  • We do not sell your personal data.

Subprocessors & integrations

  • Our application runs on Lovable Cloud, which provides our hosting, database, authentication, and storage infrastructure.
  • We may use additional services for messaging or notifications strictly to deliver the features you use.

Cookies & analytics

  • We use essential cookies and local storage to keep you signed in and to remember your preferences.
  • Any analytics we use are limited to understanding how the app is used so we can improve it.

Retention & deletion

  • We keep account and transaction records for as long as your account is active and as needed for legitimate business and legal purposes.
  • If you would like your account or personal data removed, contact us and we will help with your request.

Privacy requests & contact

  • You can request access to, correction of, or deletion of your personal information.
  • Reach our team through the Contact page and we will respond as quickly as we can.

Reporting a security concern

  • If you believe you have found a security issue, please contact us through the Contact page so we can investigate.
  • Please do not publicly disclose a potential vulnerability before we have had a chance to address it.

This page is editable content maintained by Maankulan and is provided for general information. It is not a certification and is not independently verified. For specific questions, please visit our Contact page.