Name: Bavua
Author: CodeGen Technologies

This Privacy Policy explains how CodeGen Technologies (Pty) Ltd (“we,” “us,” “CodeGenTech”), operating under the trade name Bavua, collects, uses, and protects your information when you use our screen mirroring application and related services.

CodeGen Technologies is a South African company registered under CIPC, with our principal place of business in Cape Town, South Africa. We are committed to compliance with the Protection of Personal Information Act (POPIA), the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

1. Information We Collect

1.1 Account Information

When you create a Bavua account by signing in with Google, Apple, GitHub, Microsoft, or LinkedIn, we collect from that sign-in provider:

Email address
Name
Profile photo URL
The provider's identifier for your account
Authentication tokens (used to verify your sign-in)

1.2 Device Information

To provide our services, we collect:

Device name, type, and model
Operating system version
An identifier for each installation of the app, generated by the app itself (not a hardware identifier) and linked to your account
Local network IP address
Network connection type

1.3 Usage Data

We collect usage data linked to your account:

Session start and end times and duration
Session frame rate and latency
Error reports

1.4 Purchase Information

Subscriptions bought in the Bavua apps are paid through Apple's App Store or Google Play. The store takes the payment, and we never receive your card or other payment details. The store tells us about each subscription, and we keep this purchase history linked to your account:

The plan you bought and its billing period
The status of the subscription (for example active, expired, or refunded), whether it renews automatically, and the dates it started and ends
The store's identifiers for the purchase

So that the store can tell us which account a purchase belongs to, the app gives the store a random identifier for your Bavua account. It does not contain your name or email address.

1.5 Information We Do NOT Collect

Bavua is designed with privacy at its core. We DO NOT collect:

Screen content or recordings
Keystrokes or input data
Location data
Contacts, photos, or files stored on your devices
Browsing history

2. How We Use Your Information

We use collected information to:

Provide and maintain the Bavua service
Authenticate your identity and devices
Process subscription payments
Send essential service communications
Improve product performance and reliability
Comply with legal obligations

3. Data Storage and Security

3.1 Where We Store Data

Account data is stored on servers located in:

European Union (primary)
United States (backup)

Screen content is NEVER transmitted to our servers. All mirroring occurs directly between your devices using peer-to-peer connections.

3.2 Security Measures

HTTPS (TLS) encryption for traffic between the Bavua apps and our servers
Screen content is sent directly between your own devices on your local network, not through our servers

The screen stream between your devices is not encrypted in transit on your local network.

4. Data Sharing

We do not sell your personal information. We may share data with:

4.1 Service Providers

Payment processors (Paystack for purchases made on our website; Apple and Google for subscriptions bought in the apps through the App Store or Google Play)
API hosting (Amazon Web Services, in the EU)
Database hosting (MongoDB Atlas)
Website hosting and content delivery (Cloudflare)
Sign-in providers (Google, Apple, GitHub, Microsoft, or LinkedIn, depending on which one you sign in with)

4.2 Legal Requirements

We may disclose information if required by law or to:

Comply with legal process
Protect our rights and property
Ensure user safety

5. Your Rights

5.1 GDPR Rights (EU Users)

Right to access your data
Right to rectification
Right to erasure (“right to be forgotten”)
Right to data portability
Right to object to processing
Right to withdraw consent

5.2 POPIA Rights (South African Users)

Right to access personal information
Right to correction of information
Right to deletion of information
Right to object to processing
Right to submit complaints to the Information Regulator

5.3 CCPA Rights (California Users)

Right to know what data is collected
Right to delete personal information
Right to opt-out of data sales (we do not sell data)
Right to non-discrimination

To exercise any rights, contact: privacy@bavua.co.za

6. Data Retention

Account data: Retained until account deletion + 30 days
Usage logs: Anonymized after 90 days, deleted after 1 year
Payment and purchase records: Retained for 7 years (legal requirement)

7. Deleting Your Account

You can delete your Bavua account at any time in the app:

Bavua Display on Android: Account > Delete Account
Bavua Host on a Mac: Settings > Account > Delete Account

If you cannot use the app, email privacy@bavua.co.za from the email address of your account and we will delete the account for you.

When you delete your account, we delete:

Your profile (name, email address, profile photo URL, and sign-in provider identifier)
Your registered devices
Your sessions
Your device pairings and hosts
Any team you own

Payment and purchase records are kept for 7 years, as set out in Section 6.

Step-by-step instructions are on our account deletion page.

8. Children's Privacy

Bavua is not intended for users under 13 years of age. We do not knowingly collect information from children under 13.

9. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via email or in-app notification at least 30 days before they take effect.

10. Contact Us

Data Protection Officer:
Email: dpo@codegentech.co.za
Address: CodeGen Technologies (Pty) Ltd, Cape Town, South Africa

For general privacy inquiries:
Email: privacy@bavua.co.za