Privacy policy

Who holds your data

Every customer runs its own Makon deployment on its own server. The business records in it — clients, contracts, payments — belong to that organisation, and it decides what is collected, how long it is kept and who may see it. Makon supplies the software.

If you are a buyer whose details a developer holds in Makon, that developer is who to ask about your records. We cannot reach into a customer's deployment to answer for them.

What the app handles

• Your account: your name, username or email address, and the role that decides which screens you can open. Used to sign you in and nothing else.
• Business records you read or enter: clients, contracts, instalments, payments, buildings and units. These may include a client's name, phone number, address and passport details, because a sales contract requires them.
• Camera images, only while the Scanner is open: see below.

The passport scanner

The app asks for camera access only when you open the Scanner, and only to photograph a passport or national ID so the client's details fill themselves in rather than being typed.

The photograph is sent to your organisation's own server, the text is read from it, and the fields come back to the review step. The image is held in memory for that request and is never written to disk — not on your device, not on the server. If you walk away at the review step, nothing is left behind.

Where your organisation has configured an external text-recognition provider instead of the one built in, the image is passed to that provider purely to extract the text. That is a choice made by your organisation's administrator, who can tell you which is in use.

The app never opens your photo library, and never asks for it.

What the app does not do

• No advertising, and no advertising identifiers.
• No third-party analytics or tracking. The app contains no third-party SDKs at all.
• No tracking you across other companies' apps or websites.
• No selling or sharing of data. There is nobody to sell it to: the app talks to your organisation's server and to nothing else.
• No location collection.

Security

All traffic uses HTTPS. Your sign-in tokens are held in the iOS Keychain, the operating system's protected store, rather than in ordinary app storage, and they are removed when you sign out.

Access is deny-by-default: the server grants your session only the permissions your role carries, and the app cannot see records your role is not entitled to.

Keeping and deleting data

How long business records are kept is decided by the organisation that holds them, under the law that applies to it. Ask your administrator to correct or remove a record and they can do it directly.

To have your own Makon user account closed, ask your administrator, or write to hello@makon.online and we will arrange it with them.

Children

Makon is a tool for people at work. It is not directed at children and we do not knowingly collect anything from them.

Changes and contact

If this policy changes in a way that affects you, the date at the top changes with it and the new version appears here.

Questions, or anything you think this page gets wrong: hello@makon.online.