Privacy Policy
How your personal profile, audio audition logs, token transactions, and digital licenses are protected under Uganda Data Protection Law.
1. Data Controller & Parent Entity
Mulika Audio Safari (MAS) is operated by Mulika Studios Ltd (Kampala, Uganda), acting as Data Controller under the Data Protection and Privacy Act, 2019 of Uganda. For international clients, our practices align with global data protection standards (GDPR).
2. Personal & Profile Information Collected
We store essential account details under Supabase Authentication: display name, email, avatar path, user role, and country of origin. We log token transaction ledgers, audio audition analytics, and download records to verify licensing rights and calculate contributor royalty splits.
3. Media Vaults & Presigned Cloudflare R2
Public sound previews are served via optimized CDN buckets. High-resolution master audio (WAV files, stem packages, sample zip packs) are stored in private Cloudflare R2 vaults. Presigned download links expire after 24 hours to prevent hotlinking and unauthorized redistribution.
4. Secure External Payments
Transactions for token top-ups, individual cue licenses, and Safari Pass subscriptions are processed through Flutterwave's PCI-DSS compliant payment portal. Flutterwave handles Mobile Money and card handshakes; we store only transaction reference tokens and status receipts.
5. Your Privacy Rights (Uganda PDPO)
Under the Data Protection and Privacy Act 2019, you have the right to request access to your personal data, request correction of inaccurate details, request account deletion, or object to direct marketing. Contact our Data Protection Officer at info@mulikaaudiosafari.com.
6. Data Security & Encryption
We enforce SSL/TLS encryption, bcrypt authentication, restricted database permissions, and immutable audit logs. We do not sell or rent personal information to third-party advertisers.
Detailed Privacy Disclosures
1. Third-Party Web Integrations
To provide audio playback controls, waveform visualization (Wavesurfer.js), and database connectivity, we load scripts from CDN repositories and Supabase infrastructure. These providers collect standard anonymous telemetry like browser agents and response times to optimize performance.
2. Local Browser Caches & Cookies
We use LocalStorage and essential session cookies strictly for website operations: saving favorites lists, active audio player state, volume preferences, licensing cart items, and authenticated Supabase user tokens.
3. Data Subject Rights & Deletion
You may request account deletion via your Account Settings or by emailing info@mulikaaudiosafari.com. Account deletion removes personal profile entries while preserving executed token transaction logs required for contributor royalty calculations.