Introduction

Welcome to MMUN (Modern Minds Unifying Network). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and protect your data when you use our social media platform designed for university and college students.

By creating an account or using MMUN, you agree to the terms described in this Privacy Policy. Please read it carefully before using the platform.

Who We Are

MMUN (Modern Minds Unifying Network) is a student-focused social media application founded and operated by Ndung'u Patrick Ngotho, operating primarily in Kenya and East Africa. The platform is registered with the Kenya Copyright Board (Registration No. 522922641).

Information We Collect

We collect only the information necessary to provide you with a safe and functional experience on MMUN.

Information You Provide Directly

• Full name and email address (used for account creation and identification)
• Phone number (used for account verification and security purposes)
• Profile information such as your university or college affiliation
• Photos, videos, and files that you choose to upload or share on the platform
• Any content you post, comment on, or share within the app
• Business or professional information provided when posting jobs or marketplace listings (applies to non-student users — see Section 14)

Information Collected Automatically

• Device information (e.g. device type, operating system, browser type)
• Log data such as access times, app features used, and error reports
• IP address and general usage patterns to improve app performance
• Cookies and local storage: We use cookies and browser local storage to maintain your login session, remember your preferences (e.g. theme settings), and keep you securely authenticated. You can clear these via your browser or device settings, though doing so may log you out of the app.
• WebRTC and IP address disclosure during calls: MMUN uses WebRTC technology to power audio and video calls. During a live call, your IP address may be visible to the other participant(s) as part of how peer-to-peer connection technology works. This is a technical characteristic of WebRTC, not a data collection practice by MMUN. You should be aware of this before initiating or accepting calls.

Information We Do NOT Collect

• We do not collect precise GPS or real-time location data
• We do not collect payment or financial information
• We do not knowingly collect data from individuals under the age of 18

How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your MMUN account
• To verify your identity and institution through school API integration
• To enable you to connect, post, and interact with other students
• To facilitate the sharing of photos, videos, and files on the platform
• To enable real-time messaging, audio calls, and video calls
• To send important service-related notifications (e.g. account alerts, policy updates)
• To maintain session authentication using cookies and local storage
• To monitor and improve app performance and user experience
• To enforce our Community Guidelines and Terms of Service
• To comply with applicable Kenyan and East African laws and regulations

Legal Basis for Processing Your Data

We process your personal data on the following legal grounds under the Kenya Data Protection Act, 2019:

• Contractual necessity: Processing is required to provide the services you signed up for.
• Consent: Where you have given us explicit consent (e.g. uploading profile photos, enabling calls).
• Legitimate interests: To improve our platform, prevent fraud, and ensure security.
• Legal obligation: Where we are required by Kenyan law or court order to process certain data.

Sharing of Your Information

MMUN does not sell, rent, or trade your personal information to any third parties. We do not share your data with advertisers or marketing companies.

Your data is accessible only to authorised MMUN personnel and the trusted third-party service providers listed in Section 7 (our data processors), who assist us in operating the platform under strict data processing agreements. We may also disclose your information in the following limited circumstances:

• Legal compliance: If required by Kenyan law, court order, or government authority.
• Safety and security: To protect the rights, property, or safety of MMUN users or the public.
• Business transfer: In the unlikely event of a merger or acquisition, your data may be transferred. You will be notified in advance and your rights under this policy will be maintained.

Third-Party Data Processors

To operate MMUN, we use trusted third-party service providers (data processors) who process your data solely on our behalf and under our instructions. These providers are bound by contractual obligations to protect your data in accordance with the Kenya Data Protection Act, 2019.

Our current data processors include:

We will update this table whenever we add or change a data processor. If you have questions about any of these processors, contact us at deazerrick@gmail.com.

Data Storage and Security

We take the security of your personal information seriously. We implement reasonable technical and organisational measures to protect your data from unauthorised access, loss, misuse, or alteration.

These measures include:

• Encrypted storage of sensitive account data
• Secure authentication tokens stored in cookies and local storage
• Secure access controls for internal systems
• Regular security reviews and monitoring
• Use of HTTPS for all data transmissions

However, please note that no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Cross-Border Data Transfers

Some of our third-party service providers (listed in Section 7), including Google Firebase, operate servers located outside Kenya, including in the United States and other countries. When you use MMUN, your personal data may therefore be transferred to and processed in countries outside Kenya.

Where such transfers occur, we ensure they are conducted in compliance with the Kenya Data Protection Act, 2019, including by relying on recognised transfer mechanisms such as contractual obligations with the receiving party to maintain equivalent data protection standards.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. You may request deletion of your account and associated data at any time by contacting us at deazerrick@gmail.com.

Upon account deletion, we will remove your personal data from our active systems within a reasonable time, except where retention is required by Kenyan law or for legitimate business purposes such as fraud prevention.

Your Rights

As a user of MMUN, you have the following rights regarding your personal data under the Kenya Data Protection Act, 2019:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete data.
• Right to Deletion: You may request that we delete your personal data (subject to legal obligations).
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Object: You may object to processing based on legitimate interests where your individual circumstances warrant it.
• Right to Complain: You have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

To exercise any of these rights, contact us at deazerrick@gmail.com. We will respond within 21 days.

Children's Privacy

MMUN is intended exclusively for university and college students aged 18 and above. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that a user is under 18, we will promptly deactivate their account and delete any associated data.

If you believe a minor has registered on our platform, please contact us immediately at deazerrick@gmail.com.

User-Generated Content

Any photos, videos, files, or other content you upload to MMUN may be visible to other users of the platform, depending on your privacy settings. You are responsible for the content you share and must ensure it does not violate our Community Guidelines or infringe on the rights of others.

By uploading content, you grant MMUN a limited, non-exclusive, royalty-free licence to display and distribute that content within the platform solely for the purpose of providing our services to you and other users. This licence does not permit MMUN to sell, commercialise, or share your content outside the platform. It is sublicensable only to the extent necessary to operate and maintain the platform's infrastructure (e.g. hosting providers). You retain full ownership of all content you upload.

Non-Student Users

Certain sections of MMUN — specifically the Jobs board and the MABS marketplace — allow individuals and organisations who are not students to post content. This includes businesses, government bodies, companies, and individual sellers.

If you are a non-student user posting on MMUN, the following applies to you:

• We collect only the information you provide when submitting a listing or job post (e.g. contact details, organisation name, post content).
• This information will be visible to verified student users of MMUN.
• You are responsible for ensuring that any personal data you include in your post complies with applicable data protection laws.
• You hold the same rights as student users with respect to your submitted data — including the right to access, correct, and request deletion of your data by contacting deazerrick@gmail.com.
• MMUN reserves the right to remove listings that violate our Community Guidelines or Terms of Service.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will notify you through the app or via email. The updated policy will be effective from the date it is posted.

We encourage you to review this Privacy Policy periodically. Continued use of MMUN after changes are posted constitutes your acceptance of the updated policy.

Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of Kenya, including but not limited to the Kenya Data Protection Act, 2019, the Computer Misuse and Cybercrimes Act, 2018, and any other applicable Kenyan legislation relating to data protection and privacy.

Any disputes arising from or relating to this Privacy Policy or the use of MMUN shall be subject to the exclusive jurisdiction of the courts of Kenya. If you are accessing MMUN from outside Kenya, you do so at your own risk and are responsible for compliance with your local laws to the extent they are applicable.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out to us: