Privacy Policy

Personal Information:

• Name, email address, phone number
• Payment information for subscriptions and billing
• Account credentials and profile data

Non-Personal Information:

• IP addresses, browser type, device information
• Cookies and analytics data
• Usage patterns and interaction with our Services

Our mobile apps, starting with RafikiHPress, use a free HostRafiki account. This section describes exactly what that account and the app send to us.

What we store on our servers:

• Account: your name, email address, and a hashed password (we never store your password in readable form), plus your plan and account status
• Connected sites: for each WordPress site you connect, its web address, its name, its icon, the type of sign-in used (for example application password), the WordPress version, and when it was connected and last used
• Usage: the days you opened the app, your device platform (Android or iOS), the app version, and simple counts of actions such as creating, scheduling, or publishing a post, or a failed connection attempt
• Sign-in sessions: a token for each device you are signed in on, which expires after 90 days or when you sign out

What we never receive or store:

• Your WordPress usernames, passwords, or application passwords. These stay in your phone’s secure storage and are sent only to your own WordPress site
• The content of your posts, pages, or media, their titles, or their web addresses. Usage events contain only the kind of action, never what it was about
• Your contacts, precise location, or advertising identifiers

Diagnostics and notifications:

• Crash and error reports may be collected through Sentry to fix bugs, when enabled in a release of the app. They contain technical details such as device model, operating system version, and the error, not your content
• Reminders shown by the app are scheduled on your device. We do not send push notifications from our servers

Deleting your account:

You can delete your account at any time in the app (Profile → Delete Account) or on the web at api.hostrafiki.com/account/delete. Deleting it permanently removes your account, your connected site records, your sign-in sessions, and your activity days. Anonymous usage counts are kept without any link to you. Deleting your account does not change anything on your WordPress sites.

HostRafiki uses collected data to:

• Provide and improve hosting and product services
• Process payments and manage subscriptions
• Communicate important updates, support, and promotions
• Ensure security, prevent fraud, and maintain system integrity
• Personalize and enhance your user experience
• Apply your plan’s limits (for example how many WordPress sites you can connect) and understand, in aggregate, how our apps are used

We do not sell your personal data. Information may be shared in the following circumstances:

• With service providers who assist in delivering our services (e.g., our hosting provider, email delivery, crash reporting, payment processors, analytics providers)
• When required by law or legal processes
• In connection with business transfers, mergers, or acquisitions

HostRafiki uses cookies and similar technologies to improve website functionality and track performance. Types of cookies:

• Essential: Required for website functionality
• Performance & Analytics: Measure usage and improve services

Users can manage cookies via browser settings or our website cookie consent notice.

We implement robust security measures including:

• Encrypted data transfers via SSL
• Real-time monitoring and Imunify360 protection
• Secure server storage and backups
• Passwords stored only as salted hashes, and sign-in tokens that can be revoked at any time

Depending on your jurisdiction, you may have rights including:

• Access and correction of personal data
• Request deletion of your data (app account holders can delete their account directly in the app)
• Opt-out of marketing communications
• Withdraw consent where applicable

To exercise these rights: Contact officialhostrafiki@gmail.com

HostRafiki does not knowingly collect personal information from children under 13. If we become aware that personal data has been collected from a child, we will take steps to delete it.

We retain personal data only as long as necessary for providing services, complying with legal obligations, or resolving disputes.

HostRafiki account data is kept while your account exists and is removed when you delete it. Server logs, which may include IP addresses for failed sign-in attempts, are kept for about 14 days.

HostRafiki may update this Privacy Policy periodically.

• Changes are effective immediately upon posting
• Notice may be sent via email or dashboard notification
• Continued use of Services constitutes acceptance of the updated policy

For questions or concerns about privacy:

• Email: officialhostrafiki@gmail.com
• Phone: +256 XXX XXX XXX
• Address: HostRafiki HQ, Kampala, Uganda