Privacy notice
How the Public Provenance Portal handles personal information under the South African Protection of Personal Information Act (POPIA).
What this portal collects
The portal does not require accounts and does not collect personal information from visitors. Page loads are logged at the platform level for security and rate-limiting; logs are retained for 30 days and contain only IP, user-agent and the requested path.
What appears on public pages
Public records on this portal expose only the fields that the issuing tenant's data steward has explicitly authorised. Contributors are identified by decentralised identifier (DID); names, phone numbers and exact GPS coordinates remain inside the tenant's isolated database partition and are not rendered here.
Healer and contributor surfaces
Healer pages and the per-DID earnings page are share-only — they are issued by the tenant to the data subject directly, are excluded from search-engine indexes via robots.txt, and can be revoked at any time. The portal renders "record not found" if the issuing tenant un-publishes them.
Your rights
If you appear on a public record and wish to access, correct, or remove your information, contact the issuing tenant (named on each record where applicable) or the platform operator at privacy@muranga.earth. We will route the request to the correct data steward.
This notice is informational and does not replace tenant-specific privacy notices, which govern the underlying personal information.