1. Who we are
Adexo Ltd operates the Manda platform, a mobile application connecting customers with home service providers in Mexico. References to "we", "us", or "our" mean Adexo Ltd.
As a UK-registered company, we are subject to UK GDPR and the Data Protection Act 2018. We also comply with Mexico's Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP).
2. Data we collect
Information you provide
- Account details: name, email address, phone number (optional)
- Profile information: business name, service categories, location, bio, photos (Providers)
- Service requests: descriptions, photos, budget, location details (Customers)
- Messages: content sent through the in-app messaging system
- Reviews: ratings and written feedback after service completion
- Subscription data: purchase records via Apple App Store or Google Play (we do not receive card numbers)
Information collected automatically
- Device identifiers and push notification tokens
- App usage data: screens visited, features used, session times
- Approximate location (when permitted by your device settings)
- Crash reports and performance data
3. How we use your data
- Create and manage your account
- Match Customers with relevant Providers
- Facilitate communication between Customers and Providers
- Send push notifications about service updates and messages
- Process and manage Provider subscriptions
- Improve the Platform through usage analysis
- Comply with legal obligations and enforce our Terms
- Prevent fraud and ensure Platform security
4. Legal basis for processing (UK GDPR)
- Contract performance: processing necessary to provide the services you requested
- Legitimate interests: improving the Platform, preventing fraud and ensuring security
- Legal obligation: compliance with applicable laws
- Consent: push notifications (withdrawable at any time in device settings)
5. How we share your data
- Other users: your public profile is visible to other Platform users
- Supabase: database and authentication provider (servers in EU/US)
- Apple / Google: subscription and in-app purchase processing
- Expo / Firebase: push notification delivery
We do not sell your personal data. We do not share it with advertisers.
6. International data transfers
Your data may be transferred to and stored in the United Kingdom, the European Economic Area, and the United States. We ensure appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses.
7. Data retention
We retain your personal data for as long as your account is active, plus a reasonable period to resolve disputes and comply with legal obligations. If you delete your account, we will delete your data within 30 days.
8. Your rights
- Access: request a copy of the personal data we hold about you
- Rectification: ask us to correct inaccurate or incomplete data
- Erasure: request deletion of your data
- Restriction: ask us to limit how we process your data
- Portability: receive your data in a structured, machine-readable format
- Objection: object to processing based on legitimate interests
- Withdrawal of consent: withdraw consent for notifications at any time
To exercise any of these rights: privacy@getmanda.app. We will respond within 30 days.
9. Account deletion
You may delete your account at any time from within the app (Profile > Settings > Delete account). Your data will be removed within 30 days.
10. Security
We implement encrypted data transmission, row-level security controls in our database, and access controls. If you believe your account has been compromised, contact us at privacy@getmanda.app.
11. Children
The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors.
12. Changes to this Policy
We will notify you of significant changes via the app or by email. The current version will always be available within the app.
13. Contact and complaints
Adexo Ltd · privacy@getmanda.app
Mexico: INAI — www.inai.org.mx
UK: ICO — www.ico.org.uk