Privacy notice.

Who we are

The Bundu Foundation is a non-profit Company Limited by Guarantee registered in Zimbabwe. The Foundation is the custodian of the Bundu ecosystem — its shared protocols, token economics, and the Ubuntu charter — and the parent of three operating pillars:

• Mukoko (mukoko.com) — the consumer social ecosystem.
• Nyuchi Africa (nyuchi.com) — the commercial infrastructure company.
• Shamwari AI (shamwari.ai) — the community AI interface.

It also stewards Foundation initiatives — the Zimbabwe Information Platform (travel-info.co.zw) and Bundu Education — and open projects such as the Mzizi design system, the Nyuchi Honeycomb storage network, SiafuDB, and Harare Metro.

This notice covers personal data the Foundation processes through this website, bundu.org, and its research and newsroom surfaces. Each operating brand runs its own products and publishes its own privacy notice for those products — seemukoko.com/legal/privacyfor the consumer apps andnyuchi.com/legal/privacyfor the commercial platform. Nyuchi Africa (Pvt) Ltd is the operating company that builds and runs the platforms under a service agreement with the Foundation, and acts as the data processor for product data.

Information we collect on bundu.org

bundu.org is a research, newsroom, and information site. We collect only what is needed to operate it:

• Contact details you provide — your email address if you subscribe to the newsletter or write to us, and the contents of any message you send.
• Usage and device data — pages viewed, referring site, approximate location, browser and device type, and IP address, collected through analytics and reliability tooling.
• Support conversations — messages you send through the in-page support chat.

We do not sell personal data, do not run an advertising network, and do not resell user attention.

How we use it

To operate and secure the site, respond to enquiries, send the newsletter you asked for, understand aggregate usage so we can fix what is broken, and meet our legal obligations. Our lawful bases are your consent (newsletter, non-essential cookies), our legitimate interest in running a secure and useful site, and compliance with applicable law.

Service providers

We share data with a small set of processors who act on our instructions. For bundu.org these are:

• Vercel — website hosting, content delivery, and privacy-focused web analytics.
• Google Analytics — aggregate visitor analytics.
• Sentry — error and performance monitoring.
• Sanity — the content management system behind our research and newsroom pages.
• Intercom — the in-page support chat.
• Formspree — newsletter sign-up form handling.
• Cloudflare — Turnstile anti-spam protection on our forms.
• Google Fonts — web font delivery.

See our Terms of use for the terms that govern this site. Cookie detail for each brand is published on that brand's cookie policy.

Data residency and retention

Data is held on regional infrastructure aligned with the visitor's jurisdiction where our providers support it. We keep personal data only as long as needed for the purpose it was collected, or as required by law, and then delete or anonymise it.

Your rights

Depending on where you live, you have rights of access, correction, portability, deletion, and objection, and the right to withdraw consent. This notice is drafted to satisfy the Zimbabwe Data Protection Act, POPIA (South Africa), and the EU GDPR. To exercise a right, email us at the address below with the subject line "Data request"; we will respond within the timelines set by the applicable law.

Contact

Bundu Foundation · Harare, Zimbabwe ·hello@bundu.org. For privacy matters concerning a specific product, contact that brand directly —privacy@nyuchi.com (Nyuchi) orprivacy@mukoko.com (Mukoko).