Effective date: March 19, 2026
Last updated: March 19, 2026
Summary: BWA Sacre respects your privacy. Your personal data is encrypted and never sold or shared with third parties. Only authorized administrators can access validated data, which is itself protected by Zero-Knowledge (ZK) encryption.
1. Data Controller
SIGMA SARL (Solutions Informatiques et Gestion Moderne en Afrique)
Represented by Dembele Honore
Abidjan, Ivory Coast
Contact: [email protected]
2. Data Collected
2.1 Registration Data
- Last name, first name, date of birth, place of birth, country
- Affiliated sanctuary
- Secret phrase (25 words) - stored as a hash, never in plain text
2.2 Module Data
- Heritage: property descriptions, GPS/UTM coordinates of land
- Family: family relationships (type of link, related persons)
- Ceremony / Pilgrimage: participation, dates, sanctuary
- Genealogy: deceased records, family tree
2.3 Technical Data
- Authentication token (JWT) stored locally
- Firebase Cloud Messaging token (push notifications)
- Language preference (FR/EN)
3. Use of Data
Your data is used exclusively to:
- Manage your registration and access to the BWA Sacred Register
- Enable multi-signature validation (Gnosis Safe) of your records
- Send notifications related to your account activity
- Produce anonymized aggregate statistics
4. Data Protection - ZK Encryption
Sensitive data (date of birth, place of birth, heritage, family) is encrypted after validation by the Zero-Knowledge (ZK) system. Once encrypted, it is only accessible to the concerned member upon login. Administrators only see encrypted data.
5. Blockchain
Validated registrations are recorded on an internal blockchain. This registration is permanent and guarantees the integrity of the register. No sensitive personal data is stored in plain text on the blockchain.
6. Data Sharing
We never sell, rent, or share your personal data with third parties.
Data access is strictly limited:
- The member: accesses all their own data (decrypted upon login)
- Gnosis Safe validators: see pending data (unencrypted) and validated data (encrypted)
- The President: administrative access with the same encryption restrictions
7. Third-Party Services
- Firebase Cloud Messaging (Google): for push notifications. No personal data is transmitted to Google; only an anonymous technical identifier is used.
- Google Maps: for land localization. GPS coordinates are sent to Google only when displaying the map.
8. Data Retention
Data is retained as long as the member is registered in the BWA Sacred Register. In the event of a declared and validated death, data remains in the register in accordance with the genealogical purpose of the application.
9. Your Rights
In accordance with applicable laws, you have the following rights:
- Right of access: view your data via the application (My Info module)
- Right of rectification: request correction of inaccurate data
- Right of deletion: request deletion of your account (subject to retention obligations)
- Right of objection: object to the processing of your data
To exercise these rights, contact us at: [email protected]
10. Security
- HTTPS (SSL/TLS) communication between the app and the server
- Authentication via hashed secret phrase (25 words)
- JWT tokens with expiration
- ZK encryption of sensitive data after validation
- Multi-signature validation (3 out of 5 Gnosis Safe)
- Secure token storage on the device (iOS Keychain / Android EncryptedSharedPreferences)
11. Children
The application is not intended for children under 13. If a parent or guardian believes a minor has provided personal data, they may contact us to have it deleted.
12. Changes
We reserve the right to modify this policy. Any changes will be notified through the application. The last updated date is indicated at the top of this page.
13. Contact
For any questions regarding this privacy policy:
SIGMA SARL
Email: [email protected]
Website: https://bwa-sacre.org
