Privacy policy

01Who we are

Gudea is operated by ANKIDA (Duhok, Kurdistan Region of Iraq). Gudea shares its sign-in with Mîmar, also run by ANKIDA: one account works on both.

02What we collect

Your account: email, password (stored only as a secure hash), name, and — if you use Mîmar — your Mîmar profile and verification status.

Your office’s records: what you and your team enter — projects, client names and phone numbers, fees, invoices, payments, costs, suppliers, construction stages, site-visit notes, photos and receipt files.

Billing: the plan you choose, payment method, reference and the payment screenshot you upload.

Technical: basic logs needed to run and secure the service. We use one sign-in cookie; no advertising or tracking cookies.

03Your clients’ information

Your office decides what client, supplier and worker information to enter. We process it only on your office’s behalf, to provide Gudea — we do not contact your clients or use their details for anything else.

Clients who open a project link do not need an account. We do not track them.

04Who can see it

Only members of your office can see your office’s records. Your client sees what the project link shows. ANKIDA staff access data only to provide support, verify payments, or keep the service secure.

We never sell your data or your clients’ data.

05Where it is stored

Data is stored with Supabase in the European Union (Frankfurt, Germany) and the app runs on Vercel servers in Frankfurt. Photos and files are kept in private storage and are shown only through short-lived links. Email is used only for sign-in and account messages.

06How long we keep it

While your office is active, and for 12 months after its last paid period or trial ends. Records and files you delete are removed from the service.

07Your choices

Office owners can download all office data from Office settings, correct records at any time, and ask us to delete the office and its data. You can ask what personal information we hold about you.

08Security

Access is protected by per-office permission rules in the database, encrypted connections, and private file storage. No system is perfectly secure; tell us straight away if you think your account has been misused.

09Changes and contact

We may update this policy; the date above shows the current version.

Questions or requests: contact ANKIDA at info@ankida.studio.