Your data, and what we do with it
Your data belongs to you. This page explains what we collect, why, where it lives, and how to take it with you or have it deleted.
85 records sent back to field teams for correction
Data quality · 85 records sent back to fix
What we collect
Account details (name, work email, organisation, role), the content you create (surveys, submissions, indicators, reports), and technical data needed to run and secure the service: device and browser type, IP address, and an audit trail of who changed what and when. We do not sell data, and we do not use your programme data to train models.
Data you collect through the platform
Survey submissions, photographs, GPS coordinates, audio and documents belong to your organisation. We process them only to deliver the service: rendering dashboards, calculating indicators and generating the reports you ask for.
Where it lives
In our cloud by default, in a region you choose. Enterprise and government customers may self-host on their own infrastructure, in which case we never hold the data at all. Sub-processors and storage regions are listed in the trust centre.
AI and your data
When you use an AI feature, the relevant slice of your data is sent to the model provider you configured. If you bring your own key, the request goes to your provider and your account. If you use our credits, we use providers under a no-training agreement. You can turn off AI features entirely, or route them to a self-hosted model.
Your rights
Export everything at any time, in CSV, Excel, JSON, PDF or via the API. Ask us to correct or delete any record. Ask us to delete your organisation and everything in it. We act on all three within one business day, and you never have to ask us twice.
Security
Encryption in transit and at rest, role-based access control, a complete audit trail, two-factor authentication, least-privilege access for our staff, and regular independent penetration testing. SOC 2 Type II, ISO 27001, GDPR and DPDP programmes are on the roadmap for the enterprise tier.
Retention
Your data is kept for as long as your account is active. Deleted accounts are held for 30 days in a recoverable state, then erased from primary storage and removed from backups on the next backup cycle.
Contact
Questions, or a request we have not covered here: privacy@maahir.io. Security reports: security@maahir.io.
What you can see
Every view, every export and every API call is logged with the actor, the time and the address. This is what an audit trail looks like when it is built in rather than bolted on afterwards.
- Who looked at which record
- When a value was edited, and from what
- Which exports left the platform
- Which API key made which call
Executive overview
Indicator performance
85 records sent back to field teams for correction
Data quality
Attrition 6.4% across all waves
Case tracking
