Privacy Policy

Last updated: 12 June 2026

This Privacy Policy explains how Kiruko — operated by Zilwa Eklere Ltd ("Kiruko", "we", "us") — collects, uses, shares and protects personal data when you use our mobile apps, web dashboard and related services (the "Service").

1. Who we are

Kiruko is an all-in-one workforce platform (attendance, scheduling, payroll, leave, tasks and related HR features) for employers and their teams, operated by Zilwa Eklere Ltd, a company registered in Mauritius. You can reach us at hello@kiruko.mu.

2. Controllers & roles

Kiruko is typically used by an employer (the "Company") to manage its workforce. For most employee data processed on behalf of a Company, the Company is the data controller and Kiruko acts as a data processor, handling data under the Company's instructions. For account creation, billing, security and improving the Service, Kiruko acts as a controller in its own right. Mauritian data-protection law (the Data Protection Act 2017) applies to our processing.

3. Data we collect

Account & identity

Name, email address, phone number, password (stored hashed), role (employer/employee), preferred language, and company/employment details.

Workforce & payroll data

Job and department, schedules, clock-in/clock-out and break records, leave requests and balances, salary, allowances, deductions, overtime, payslips, loans and repayments — as entered by you or your employer.

Documents & uploads

Files and images you upload, such as receipts (which may be processed by optical-character-recognition to extract amounts and dates) and supporting documents. Uploaded files are scanned for malware.

Device & usage

Device type and operating system, app version, push-notification tokens (to send you reminders and updates), log data, and basic usage diagnostics. We do not track continuous background location.

Website analytics

On our marketing website we use Umami, a privacy-first, cookieless analytics tool, to understand aggregate traffic — page views, referring sources, approximate country, device type, and which actions visitors take. It uses no cookies, does not store IP addresses or any information that identifies you personally, and is not used to build a profile of you. This analytics data is hosted in the European Union. Because no personal data is collected this way, no consent banner is required.

Communications

Messages and reports you submit through support or any confidential reporting channel.

4. How we use data

• To provide and operate the Service — attendance, payroll, scheduling, leave, tasks, live earnings and notifications.
• To authenticate you and keep your account and your employer's data secure.
• To calculate pay, overtime and statutory amounts, and to generate payslips and reports.
• To send service messages (e.g. clock-in reminders, verification emails, important notices).
• To provide customer support and respond to your requests.
• To detect, prevent and investigate fraud, abuse and security incidents, and to maintain audit logs.
• To comply with legal obligations.

We do not sell your personal data.

5. Sharing & disclosure

• Your employer: employee data is accessible to authorised administrators of the Company you belong to, per their roles and permissions.
• Service providers: vetted vendors who help us run the Service (cloud hosting, database, file storage, email delivery, OCR, malware scanning, push notifications), bound by confidentiality and processing only on our instructions.
• Legal & safety: where required by law, or to protect the rights, property or safety of Kiruko, our users or the public.
• Business transfers: in connection with a merger, acquisition or sale of assets, subject to this Policy.

6. Retention

We keep personal data for as long as your account is active and as needed to provide the Service, and thereafter as required for legal, accounting, payroll-record and dispute-resolution purposes. Certain records (e.g. payroll and audit logs) are retained for statutory periods. When data is no longer needed, we delete or anonymise it.

7. Your rights

Subject to applicable law, you may request to access, correct, update, export or delete your personal data, or object to or restrict certain processing. If your data is managed by your employer as controller, we may direct your request to them. To exercise your rights, contact hello@kiruko.mu.

8. Deleting your account

You can request deletion of your Kiruko account and associated personal data at any time:

• In the app: Settings → Account → Delete account, then confirm.
• By email: write to hello@kiruko.mu from your account email with the subject "Delete my account".

On deletion we remove or anonymise your personal data, except records we are legally required to retain (for example, payroll and statutory records held by your employer, and security/audit logs). Where you are an employee, some employment records remain under the control of your employer.

9. Security

We use industry-standard safeguards including encryption in transit, hashed passwords, role-based access control, trusted-device sign-in, append-only audit trails on sensitive actions, and malware scanning of uploads. No method of transmission or storage is completely secure, but we work to protect your data and to notify affected users and authorities of breaches as required by law.

10. International transfers

We are based in Mauritius and primarily serve Mauritius (with Madagascar and the wider region to follow). Some service providers may process data in other countries; where they do, we take steps to ensure an adequate level of protection consistent with applicable law.

11. Younger workers & children

The Service is intended for employers and working individuals, including younger workers aged 13 and over in part-time or school-holiday employment, used under their employer's supervision. It is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us data, contact us and we will delete it.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date and, where appropriate, notify you in-app or by email.

13. Contact

Questions or requests about privacy? Contact Zilwa Eklere Ltd at hello@kiruko.mu.