Privacy policy
Last updated: 10 November 2026. Applies to the Mavlio apps for Android, iPhone and iPad, version 1.0 and later. Mavlio is made by Halvane Labs (Lewis Munene Kinyua, Kenya).
The short version
Mavlio has no server. We, the people who make Mavlio, do not collect, receive, store or sell any information about you. Everything you put in the app stays on your phone, unless you choose to save it to your own Google Drive or share it yourself.
What stays on your phone
Your timetable, units or courses, tests, marks, grades, money records, budgets, goals, loans, notes, flashcards, logbook, fees, work shifts, scans and files are stored only in the app’s private storage on your phone. Uninstalling the app or using “Delete all data” removes them. Android may include them in your phone’s own encrypted device backup to your Google account if you have that turned on.
What you choose to send, and where it goes
| Feature | What goes where | Who can read it |
|---|---|---|
| Google Drive backup (optional) | A copy of your data, to a hidden app folder in your own Google Drive | Only you, through Mavlio. Governed by Google’s terms. |
| Running a class as a rep (optional) | Your class updates, timetable and collection totals, encrypted, to a file in your own Google Drive, readable by anyone with the class link | Only phones that have the class link (which carries the key). Google stores only scrambled data. We never see it. |
| Joining a class | Your phone downloads your rep’s encrypted class file from Google Drive. Nothing about you is sent. | Only you. |
| Payment claims | An encrypted link that you send to your rep (by WhatsApp, SMS or Bluetooth). It carries the name you chose for the class, the amount and payment reference (an M-PESA code, transaction ID or similar). | Your rep, and anyone in the class who has the link. |
| Bluetooth sharing in class (optional) | The encrypted class file and your payment claims, phone to phone, within about 100 metres. No internet. | Phones in the same class. |
| Reports and PDFs | Saved on your phone; shared only when you tap Share. | Whoever you share them with. |
| Subscriptions | Handled entirely by Google Play or the App Store. We never see your card, mobile money, carrier billing or Apple ID details. Backups never contain your subscription. | Google or Apple, under their terms. |
Permissions the app asks for
- Notifications: reminders for your classes, tests, deadlines, fees and study streak, which your phone creates on its own, and a short alert when a class you joined changes. Nothing is sent to you from a server, because there is none.
- Do Not Disturb access (optional): only if you start a focus session and allow it in Settings. Mavlio uses it to silence your phone while you study, then switches it back.
- Camera: scanning pages and QR codes, and reading text from a photo. The text is recognised on your phone (Google ML Kit), and photos stay on the phone.
- Nearby devices and location (Android): only when you open “Share in class”. Android requires location permission to scan for nearby phones; Mavlio never reads or stores your location.
- Biometrics: unlocking the app if you turn on app lock. Your fingerprint or face never leaves the phone’s secure hardware.
- Internet: Google Play Billing or the App Store, and your own Google Drive.
Payment messages
Mavlio does not read your SMS inbox and asks for no SMS permission. When you copy a payment message (M-PESA, MTN MoMo, a UPI or bank alert, a card notification) and paste it into the app, it is read on your phone to fill in the amount, date and payee, then saved in your money log. The message is never sent anywhere.
Home-screen widgets
If you add a Mavlio widget (streak, today, agenda or countdown), the app puts a small copy of what the widget shows (for example your next class or your streak) in its own private storage, and the widget reads it on the same phone. Nothing leaves the phone.
Screenshots
To protect your marks, money and notes, Mavlio blocks screenshots and screen recording, and hides its screens in the app switcher. This happens on your phone; nothing is recorded or sent.
Background checks
If you have joined a class, the app asks Google Drive a few times a day whether your rep’s class file changed, using only the file’s public version number. If it changed, you get a notification. No information about you is included.
No analytics, no ads, no tracking
Mavlio contains no advertising, analytics or crash-reporting services. There are no accounts with us.
Your control
You can see, change, export (Backup PDF) or delete everything in the app at any time. A rep can close a class, which deletes the class file from their Drive. You can remove Mavlio’s access to your Google account at myaccount.google.com/permissions.
Your rights, wherever you live
Data-protection laws give you rights over your personal data: the EU and UK GDPR, Kenya’s Data Protection Act 2019, Nigeria’s Data Protection Act 2023, South Africa’s POPIA, India’s DPDP Act 2023, Brazil’s LGPD, California’s CCPA and others. Because Mavlio runs without a server and we never receive your data, we hold nothing about you to access, correct, port or delete. You exercise those rights directly in the app: see and edit everything, export it (Backup PDF), or delete it (Settings, Delete all data). Data in your own Google Drive is controlled by you under your Google account. We never sell or share personal data, and nothing is used for advertising or to train any model.
Google Drive access, when you turn it on, uses only an app-specific folder and the class files you create. Mavlio’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Age
Mavlio is for students aged 18 and over at universities, colleges and TVET institutions. Where the law treats anyone under 18 as a child (for example India), younger students should use the app only with a parent’s or guardian’s agreement. We do not knowingly collect data from anyone, of any age.
Changes and contact
If this policy changes, the new version will be posted here with a new date. Questions or requests: email Halvane Labs at halvanelabs@gmail.com.