Privacy policy
How NjangiBook handles the personal data of njangi treasurers, secretaries and members, in line with the General Data Protection Regulation (GDPR, EU Regulation 2016/679).
Last updated: 26 October 2026
This translation is provided for convenience. If there is any difference, the French version prevails.
1. Who is responsible?
For a njangi's data (members, contributions, attendance, minutes, fund), the data controller is the njangi itself, represented by its committee (president and treasurer), which decides the rules and the information requested.
NjangiBook is published by Gamaliel Bepa (Italy), who acts as the njangi's processor (Article 28 GDPR): they host and run the tool on the committee's instructions. For the security of the platform (technical logs, abuse prevention), the publisher is the controller. Contact: sirgmll@gmail.com.
2. What data?
| Category | Examples | Why | Legal basis |
|---|---|---|---|
| Identity and contact | title, first name, last name, phone, email, address (optional, shown to members only for the meeting in their month) | identify members, send the links and the agreement | performance of the njangi agreement (Art. 6(1)(b)) |
| Life of the njangi | place, month, contributions, deposit, loans, fines, attendance, minutes, events | keep the njangi's ledger | performance of the agreement (Art. 6(1)(b)) |
| Signature | drawn signature, typed name, date, fingerprint of the signed rules | prove acceptance of the rules | performance of the agreement (Art. 6(1)(b)) |
| ID document (if the njangi requires it) | photo of the identity card or passport | verify members' identity | explicit consent (Art. 6(1)(a)), can be withdrawn at any time |
| Technical data | irreversible fingerprint of the IP address, browser type, log of changes | security, abuse prevention, traceability | legitimate interest (Art. 6(1)(f)) |
NjangiBook processes no payment card or bank data: it never collects or transfers money. Any IBAN shown is the njangi's own account.
3. Who can see what?
- Each member sees their own history as well as the njangi's calendar, committee, minutes, fund loans and agreement.
- The treasurer sees the information needed to run the njangi.
- ID documents are visible only to the treasurer and the president, through a link valid for two minutes; every view is logged.
- The publisher only sees overall figures (number of njangis, members, meetings), never members' data.
- Data is never sold, rented or used for advertising.
4. Where is the data?
Database and files: Supabase, data centre in Ireland (European Union). Website hosting: Vercel. Email delivery (if enabled): Resend. These providers act as sub-processors; any transfer outside the EU is covered by the European Commission's standard contractual clauses.
5. How long?
- ID document: deleted immediately if the sign-up is refused; the committee deletes it once identities are verified, and at the latest at the end of the njangi.
- Njangi data and log of changes: kept as long as the njangi exists. The treasurer can permanently delete the njangi at any time: all its data and files are then erased.
- Anti-abuse data (IP address fingerprints): erased after about 24 hours.
6. Security
Secret, unguessable personal links (stored only as a fingerprint), PIN code for the treasurer and the secretary locked after 5 attempts, encrypted connections (HTTPS), database not reachable from the Internet except through the server, log of every change.
7. Your rights
You can request access, rectification, erasure, restriction or portability of your data, object to processing and withdraw your consent (ID document) at any time, from your njangi's treasurer or at sirgmll@gmail.com. You can also lodge a complaint with a data protection authority, for example the Garante per la protezione dei dati personali (Italy), the CNIL (France) or the ICO (UK).
8. Age
NjangiBook is for adults only (18 and over).