Privacy Policy

Last updated 24 September 2026

1. Who we are

Komann is provided by Infynex Ltd. Questions and requests about personal data go to us:

Infynex Ltd is the controller of the personal data of people who have a Komann account: sellers, their staff and their drivers. For the details a seller records about their own customers, the seller is the controller, and Infynex Ltd processes those details on the seller’s behalf, only to run Komann for that seller.

2. What we collect

Your account. Your name, your email address and your password. The password is stored only as a salted hash that nobody can read back. The language you choose in the app is stored on your phone.

Sign-in sessions. When you signed in, the IP address and the description of the device or browser (user agent) that came with the request, so we can keep you signed in and notice misuse. A session ends when you sign out or change your password, and after seven days without use.

Business records, entered by a business’s owner, staff and drivers: the business name; its members and their roles; products, prices and stock; orders with their items, prices, delivery charges, notes and handover method; payment status and the owner’s payment confirmations (amount, reference, a note and whether the bank was checked); delivery attempts and their reasons; driver fees, fixed-fee runs and settlements with their references; and a dated record of who did what.

Customers’ details, entered by the seller: name, phone number and delivery address. A customer can correct their phone number and delivery address on their private order page until their payment is confirmed.

Payment reports. When a customer reports a bank transfer on their order page: the reference they type, the name on the transfer if they give one, and the time. Komann does not accept screenshots or photos of bank statements, and never asks for card numbers, bank account numbers or banking passwords.

Server logs. The time, result and duration of each request, to keep the service secure and running. They do not contain what was sent or received.

We do not collect location, contacts, photos, advertising identifiers or analytics. There is no advertising and no tracking in Komann.

3. Why we use it

• To provide Komann: accounts, businesses, orders, payment reports, deliveries and driver fees. This is needed to perform our contract with you.
• To keep Komann secure: sessions, rate limits and records of who did what. This is our legitimate interest and our legal duty to protect personal data.
• So a business can keep its records: orders, payments and fees are its accounts, which it must be able to produce.
• To send account emails, when email is switched on: verifying your address and resetting your password. We send no marketing.

We do not sell personal data, use it for advertising, or make automated decisions about anyone with it.

4. Who can see it

Inside a business, each role sees only what it needs. The owner sees the business’s orders, money and reported payment references. Staff handle orders, customers and stock, but cannot see bank references or confirm payments. Drivers see only the deliveries assigned to them and their own earnings, without payment details. A customer sees only their own order, through a private link that expires after 30 days and that the seller can replace or switch off at any time.

People at Infynex Ltd access personal data only to run, secure and support Komann, or when the law requires it.

5. Service providers and where data is kept

• DigitalOcean, LLC hosts Komann’s servers and database in Singapore.
• Backblaze, Inc. stores encrypted backup copies, which only we can decrypt.
• Brevo SAS (France) sends account emails, only when email is switched on.
• Zoho Corporation provides our company email, so it holds the messages you send us and our replies.

Each acts only on our instructions, under a data processing agreement. Personal data is therefore transferred outside Mauritius, protected by the safeguards in those agreements, as the Data Protection Act 2017 requires.

6. How long we keep it

• Account details: until you delete your account, which removes your name, email address, password and sessions at once.
• Sessions: until you sign out, or seven days without use.
• Customer links: 30 days, or less if the seller replaces or switches off the link.
• Business records (orders, payments, deliveries, fees and their history): while the business uses Komann, and for up to seven years after it closes, which is how long Mauritian tax and accounting rules expect records to be kept. Then we delete them.
• Encrypted backups: kept for up to 30 days, then deleted.
• Server logs: kept briefly, up to a fixed size, and overwritten as new entries arrive.

7. Your rights

Under the Data Protection Act 2017 of Mauritius you can ask for a copy of your personal data, ask us to correct or delete it, object to how it is used, and ask us to restrict its use. Write to support@infynex.cc; we answer within one month. A seller’s customer can also ask the seller, who controls their details, and we help the seller answer. You can complain to the Data Protection Office, Port Louis (dataprotection.govmu.org).

8. Deleting your account

Delete it yourself in the app: More → Your Data → Delete Account (drivers: Account → Your Data → Delete Account; before you join a business, the same button is on the set-up screen). The app asks for your password, then deletes your password and every session, removes your name and email address, and ends your access to every business. No email or support request is needed.

Completed orders, driver fees and their history stay in the business’s records, without your name: they are other people’s evidence of a payment and the business’s accounts. If you own a business, deleting your account closes it, and its private customer links stop working. So that nobody loses access or money by surprise, the app first asks you to finish what involves other people: remove the other members, finish or cancel orders in progress, settle or void driver fees still owed, and close fixed-fee runs that carry deliveries. Each of these can be done in the app.

9. Security

Passwords are stored as hashes by an established authentication library. All traffic uses HTTPS. Every request is checked on the server against the person’s business and role, so a removed member loses access at once. Requests are rate limited, backups are encrypted and kept away from the server, and no payment images exist to be exposed. If a breach puts personal data at risk, we notify the Data Protection Commissioner within 72 hours and tell the people affected where the law requires it.

10. Children

Komann is for businesses and the people who work with them. It is not meant for anyone under 18, and we do not knowingly keep accounts for them.

11. Changes to this policy

When we change this policy we update the date at the top. If a change affects how your data is used, we tell you in the app before it takes effect.