Privacy Notice

Last updated: 8 October 2026. This notice describes how the LifeSync ecosystem processes personal information across its websites and apps, including iSazisi Reader and other LifeSync applications.

1. Who we are

The LifeSync ecosystem is operated by LifeSync by MNi, the operating and trading company registered as LifeSync by MNi (CIPC 2026/735367/07), Johannesburg, Gauteng, South Africa. For the processing described in this notice, LifeSync by MNi acts as the responsible party (data controller).

Mlandeli-Notemba Investments (MNi) is the separate non-trading holding, governance and designated IP-holding company. MNi does not trade or provide consumer services and is not the responsible party for the personal information your apps and accounts generate.

2. Information we process

Information you provide

Account identity (optional): email address and sign-in identifiers when you choose to create a LifeSync account. Core features of apps such as iSazisi Reader work without an account.
Content you choose to store: documents you import, notes, highlights, bookmarks, reading goals, profile and preference settings.
Voice notes (optional): recorded on-device only, behind an explicit microphone permission; not uploaded unless you share them.
Support and community contact: messages you send through contact, testing-application, bug-report or feature-suggestion channels.
Contact abuse prevention: one-way hashes of your email address and the request IP address are used for rate limiting; the raw IP is not stored in the rate-limit record.

Information processed automatically

Diagnostics: crash reports and coarse performance data (device model, OS version) via Firebase Crashlytics and Analytics. The verified iSazisi Reader release disables Advertising ID collection. Firebase Analytics remains a diagnostic provider; other apps require their own collection review.
App integrity tokens: Firebase App Check attestation signals used to protect backend services from abuse.
Optional sync data: reading progress, highlights and preferences if you sign in and enable cloud sync — off by default.
Web usage: standard request logs and, where enabled, aggregate analytics on our public pages.

Information processed locally on your device

Library contents, reading positions, notes, voice notes and preferences stay on your device by default and are excluded from Android cloud backup.
Optional permissions — microphone, calendar, notifications, and nearby devices (Bluetooth/Nearby Wi-Fi on supported versions) — are requested only with an explanation, and every feature degrades gracefully if you decline.

3. Purposes and lawful basis

Provide the service: reading, listening, library management, progress, optional sync — performed under contract/service provision and legitimate interest.
Account services (optional): identity, optional sync and account-linked features — your consent, withdrawable by signing out or disabling sync.
Product health: crash and performance diagnostics — legitimate interest in keeping the apps reliable.
Security and abuse prevention: attestation, fraud and incident handling — legitimate interest and legal obligation.
Communication: responding to requests you send us — your request.

We do not sell personal information, do not use it for advertising or profiling, and do not share it with advertisers.

5. Cross-border transfers

Firebase services may process data on Google infrastructure outside South Africa, including in the United States. Transfers rely on Google's certification under the EU–US Data Privacy Framework and/or Standard Contractual Clauses incorporated in its data-processing terms. Contact email contents also pass through turboSMTP. turboSMTP's published DPA states EU storage and processing by default and conditions for transfers outside the EEA; the active account's applicable contract, current subprocessors and routing must be checked for the service configuration. A product-level transfer risk assessment (EU SCC Clause 14(b)) is maintained per released application; for iSazisi Reader it is published in the app's governed release package.

6. Retention

Local data: remains on your device until you delete it in-app or uninstall; we cannot recover it for you.
Account and opt-in sync data: kept while your account is active; deletion requests remove it within a reasonable period, subject to legal obligations.
Diagnostics: retained per Firebase Crashlytics/Analytics default retention windows, used only for product health.
Contact-form submissions: kept for up to 365 days from submission, or 90 days after case resolution if earlier, then removed by the next successful daily cleanup. A specific legal or incident hold may temporarily retain the necessary record, with a documented basis, responsible owner and review/expiry. An email copy is delivered to our published contact mailbox and may remain there under the email provider's retention controls.
Contact abuse-prevention records: one-way email/IP hashes support a one-hour rate-limit window. The daily cleanup removes expired rate-limit records after that window ends.

7. Security measures

Firebase service connections use TLS. The verified iSazisi Reader release disables cleartext network traffic; each other app is assessed separately.
iSazisi Reader uses app-private Android storage and disables Android cloud backup and device transfer for its app data. Device encryption depends on the device configuration.
The governed iSazisi Reader release is signed and hash-verified. App Check enforcement and signed-in verification are recorded per app and endpoint; we do not claim that every endpoint is enforced.
Our adopted security policy requires least-privilege access, protected credentials and governed releases. Current access reviews identified broad legacy grants that still need remediation. Verified measures and outstanding operational controls are recorded in the product assurance register and release package.

8. Your rights

Under POPIA (South Africa) and, where applicable, the GDPR/UK GDPR, you may request:

Access to the personal information we hold about you;
Correction of inaccurate information;
Deletion of your account and associated cloud-stored data;
Portability of the data you provided in a reasonable format;
Restriction of or objection to specific processing;
Withdrawal of consent where processing is consent-based (sign-in, sync, optional permissions).

Contact lifecvhub@gmail.com to exercise any right. You may also lodge a complaint with the Information Regulator (South Africa) or your local supervisory authority.

To delete your Yakha / Homestead app-account cloud data without reinstalling or signing in, use the self-service account deletion request page — it verifies ownership by a one-time email link and gives you a status receipt.

iSazisi Reader account and data deletion

You can request deletion without reinstalling or signing in to iSazisi Reader. Emaillifecvhub@gmail.com with the email address on the account and the requested scope. Do not send your password. We will verify the request and contact you if we need more information.

In the app, open Profile → Delete Account, choose either the iSazisi Reader profile or the LifeSync profile, then choose immediate processing or a 7-day delay. A scheduled request can be cancelled in the app before it is carried out.

iSazisi Reader profile: the request covers the Reader account profile and Reader data stored with that profile, including opt-in cloud-synced reading progress, bookmarks, highlights and preferences. Your LifeSync sign-in and other app profiles remain available.
LifeSync profile: the request covers the LifeSync profile and linked sign-ins across the ecosystem. Shared household and message records are redacted for the deleted profile rather than removed from other people's records.
On-device files: imported documents and other local Reader files remain on your device until you remove them in the app or uninstall it. This request does not delete files stored separately outside the Reader account.
Retention: account and opt-in sync data are removed within a reasonable period after a verified request, subject to applicable legal obligations. Any record retained for a legal, security or fraud-prevention reason is limited to that purpose and kept only as required. Local data remains on your device until you delete it or uninstall the app.

You can also review the retention section andcontact details in this notice.

9. Children

Our apps may be used by children under appropriate guidance. Features such as iSazisi Reader's Child Mode operate locally and do not collect personal data from the child user. Account creation is not required for core features; where an account is used, it is the adult account-holder's responsibility to supervise a child's use. We do not knowingly collect personal information directly from children through cloud services.

10. Changes to this notice

We update this notice as services and practices change. Material changes will be highlighted on this page with a new “Last updated” date, and where required we will provide additional notice.

11. Contact and complaints

Responsible party:: LifeSync by MNi (registered operating company) · CIPC 2026/735367/07
Holding company:: Mlandeli-Notemba Investments (MNi) — non-trading holding, governance and IP holding
Location:: Johannesburg, Gauteng, South Africa
Privacy contact:: lifecvhub@gmail.com

If you are not satisfied with our response, you may complain to the Information Regulator (South Africa) or the data protection authority where you live.