TafitiLens ("we", "our", "us") is operated by Peter Kariuki. This policy explains what information we collect, how we use it, and your rights. By using TafitiLens you agree to this policy.
Account information. When you sign up we collect your email address and a hashed password, stored securely in Supabase.
Survey data. Survey forms you upload (XLSForm or XForm files) are stored in a private Supabase storage bucket associated with your account. Survey responses submitted by your respondents are written directly to a Google Sheet in your own Google Drive — we do not store response data on our servers.
Google account connection. If you connect your Google account, we store an OAuth refresh token that allows us to create and write to Google Sheets on your behalf. We request only the drive.file scope, which limits our access to files that TafitiLens itself creates. We never access, read, or modify any other files in your Google Drive.
Usage data. We may log basic request metadata (timestamps, endpoints called) for debugging and service reliability. We do not use third-party analytics trackers.
We do not sell your data. We do not use your data for advertising.
TafitiLens uses Google APIs to create and write to Google Sheets. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically: we use the drive.file OAuth scope to create Sheets and write survey submission data into them. We do not read, modify, or share any Google user data beyond what is necessary to provide this feature to you.
You can revoke TafitiLens's access to your Google account at any time via your Google Account permissions page.
We use the following sub-processors to operate the service:
We do not share your personal data with any other third parties except as required by law.
Your account data is retained for as long as your account is active. Survey forms are retained until you delete them. Survey responses live in your own Google Sheet — we do not hold copies. You can request deletion of your account and associated data by emailing hello@tafitilens.com.
We use HTTPS for all data in transit, and industry-standard encryption at rest via Supabase/AWS. OAuth tokens are stored encrypted. However, no system is perfectly secure — please use a strong, unique password for your account.
TafitiLens is not directed at children under 13. We do not knowingly collect personal information from children.
We may update this policy from time to time. We'll notify you of material changes via the email on your account. Continued use of the service after changes constitutes acceptance.
Questions about this policy? Email us at hello@tafitilens.com.