Privacy Policy

Mikostate helps gated estates manage visitors at the gate. This policy explains what Stalwart Crest, Inc. (USA) collects when estates, residents and guards use the app and this website, and why.

1. Who is responsible

Each estate decides how Mikostate is used for its residents and visitors, so the estate is the data controller. Stalwart Crest, Inc. (USA) runs the service for the estate and processes the data on its behalf (the data processor), under the Nigeria Data Protection Act 2023. Questions about your estate's records go to your estate office; questions about the service go to support@stalwartcrest.com.

2. What we collect

• Account details: first and last name, an optional household name (for a house account), your email address (what you sign in with), your password (stored only as a one-way hash we can't read), your role (house account, guard, estate admin), and the house it belongs to.
• Visitor codes: the visitor's name, how long the code lasts, an optional note for the guard, and what happened to it (used, expired or cancelled).
• Gate checks: each check at the gate, with the time, the result, the code typed and which guard account checked it.
• Technical records: our hosting providers keep standard logs (such as IP address and device type) to run the service securely.

We do not collect phone numbers or photos, and we never ask visitors for anything beyond their name. Your email address is only your sign-in name: we never send you email, newsletters or marketing. We don't sell data or use advertising or tracking tools.

3. How it's used

• To sign you in and keep accounts secure.
• To create visitor codes and check them at the gate.
• To show the estate office its gate log and figures.
• To support the estate and keep the service running.

4. Who can see it

Each estate only ever sees its own data. Inside an estate, a house account sees its own codes, guards see their own checks for the day, and estate admins see the estate's log. Stalwart Crest staff can open an estate's records to help it, and every such access is recorded. Our service providers, Supabase (database and sign-in) and Cloudflare (this website), process data for us under contract.

5. How long it's kept

Visitor names (and notes) are removed from records after 12 months; the time, house and result of each check stay so the estate keeps an accurate history. Account details are kept until the account is deleted. Backups are held by our database provider for a limited time and then deleted automatically.

6. Deleting your account

In the app, open Account → Request account deletion. Your estate's admins handle it. See how to delete your account.

7. Your rights

You can ask to access, correct or delete your personal data, or object to how it's used. Ask your estate office first; you can also write to support@stalwartcrest.com. You may complain to the Nigeria Data Protection Commission.

8. Security

Data is encrypted in transit and at rest. Access is enforced by the database itself, estate by estate and role by role. Passwords are stored only as one-way hashes; a starting password from your estate office works only until you choose your own.

9. Children

Mikostate accounts are for adults set up by an estate office. Mikostate is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has an account, tell your estate office or support@stalwartcrest.com and we will remove it.

10. Changes

We'll update this page when our practices change and revise the date above.