Privacy notice
Last updated 11 November 2026
This notice explains, in plain terms, what Amana RC does with information when you use ammanarc.com and the Amana RC app. Amana RC is the product; AMMANARC is the company that runs it.
Who we are
AMMANARC runs ammanarc.com. For any privacy question or request, write to sharahbill@ammanarc.com.
The public website
The public pages store your chosen language and theme on your own device. They set no tracking cookie, load no third-party scripts or fonts, and send nothing to an analytics service.
Using the app without an account
Without an account, the app keeps your workspace record in your browser's storage on your device. In this local-only mode the app makes no network calls: nothing is sent to us or to anyone else. Your record stays on that device unless you export it yourself. If you clear your browser's storage, the record on that device is gone, so keep a backup of work that matters.
Accounts and sign-in
You can sign in with Google, or with your email address and a password. With Google, Google tells us your email address and name; we never receive your Google password. With email, after your password is accepted we send a 6-digit sign-in code to your inbox, so we know you still control that address. We can also send a one-time sign-in link to your email.
Sign-in codes, sign-in links, invitations and other account emails are sent from no-reply@ammanarc.com through our email provider, Resend. Resend sees your email address and the message it delivers.
For your account we keep your email address, the profile details you enter (name, phone, role, organisation and language), and the date you accepted these terms.
Workspaces and cloud sync
When you work in a cloud workspace, the records you sync, the files you attach and the workspace's activity log are stored by our database, sign-in and file-storage provider, Supabase, in its data centre in Ireland (European Union). Only members of a workspace can read its records, and what each member can see and change follows their role. Safeguarding cases are visible only to the safeguarding focal point and administrators.
When someone invites you to a workspace, your email address is used to send you the invitation.
Records are archived, not erased
In everyday use the app does not erase records. When a record is removed from view it is archived: it leaves the working lists but is kept, together with its history, so the evidence trail behind every figure stays complete. The activity log can only be added to; its entries are not changed or removed. An attached file can be removed by a workspace member whose role allows it.
Where the site is hosted
The website and the app's files are served by our web host, Hostinger, which handles your request and sees your IP address and browser type, as any web host does. The app on your device then talks directly to Supabase for sign-in and sync.
Other services the app contacts
If the signed-in app hits an unexpected error, it sends a short error report to our Supabase database: the error text with email addresses, phone-like numbers, IDs and keys removed, plus the app version, the room you were in, your workspace ID and your browser type. It does not include your workspace data.
The Maps room loads map images from OpenFreeMap and OpenStreetMap. Those services see your IP address and the map area you view, not your records.
We use this information only to run the service for you and your organisation. We do not sell it and do not use it for advertising.
How long we keep information
We keep your account and the workspaces you belong to while your account is open. Archived records are kept with their workspace. Error reports are kept until we remove them; we do not yet delete them on a fixed schedule. Copies of the database may also remain for a limited time in our providers' backups.
Export, correction and closing your account
You can download a full backup of a workspace at any time from the app, export registers as CSV files, and export reports to Word or Excel. To get a copy of what we hold about you, or to have it corrected, email sharahbill@ammanarc.com.
You can close your account yourself in the app, under Data protection: this removes your sign-in and your memberships. If you are the last administrator of a workspace, that workspace and its synced records are removed from the server for every member, so export a backup first. In workspaces that others still use, the records you worked on stay with the team, and your name is removed from them and from the activity log. A copy already on a device stays on that device. You can also ask us to close your account by email.
Your rights under Kenyan law
Kenya's Data Protection Act, 2019 gives you rights over your personal data, including to be told how it is used, to see it, to have wrong or misleading data corrected, to have data deleted where the law allows, and to object to some uses. To use any of these rights, email sharahbill@ammanarc.com and we will respond. If you are not satisfied with our answer, you can complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.
If your organisation set up the workspace, it decides what is collected about the people its programmes reach, and requests about that information may need to go to your organisation as well as to us.
Changes
If this notice changes, we will update it on this page and change the date above.