Legal

Privacy Policy

Last updated: 10 July 2026

Muthari ("Muthari", "we", "us") provides a construction execution platform for contractors, available at muthari.com and os.muthari.com (together, the "Service"). This policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to this policy.

1. Information we collect

Account information. When you create a workspace, we collect your company name, industry, your name, work email address, and a password. Passwords are cryptographically hashed before they reach our servers — we never store or see your password in plain text.

Workspace data. Your team enters operational data into the Service to run your projects — for example project scopes, bills of quantities, purchase orders, inventory records, engineering documents, inspection records, tasks, notifications, and team chat messages. This data belongs to you (see Section 4).

Technical information. Like most online services, our hosting and database providers automatically record basic technical logs such as IP addresses, browser type, and access timestamps, used for security and troubleshooting.

We do not collect payment card details through the Service. Subscription billing is arranged directly with you and handled through separate invoicing.

2. How we use information

We do not sell your data, use your workspace data for advertising, or share your business information with other customers.

3. Multi-tenant isolation

Muthari OS is a multi-tenant platform. Every record in the Service is bound to your company workspace, and the Service is designed so that users of one company cannot access data belonging to another company. Team chat messages are visible only within your own company.

4. Your data belongs to you

The operational data you and your team enter into Muthari is your data. We act as its custodian, not its owner. You can export your complete workspace data yourself, at any time: an administrator runs it from Company Settings and receives an Excel workbook plus a machine-readable file holding every field as stored. Uploaded documents and photos are not bundled into that download; you receive an index of them with links that stay live for about an hour. If you need the files themselves as a single archive, or you have more documents than one index covers, contact us and we will provide them within a reasonable period.

5. Where data is stored

The Service is operated using reputable third-party infrastructure providers: our application is hosted with Hostinger and workspace data is stored with Supabase (a managed PostgreSQL database service). These providers store data on secure cloud infrastructure and act as our data processors. We share with them only what is necessary to run the Service.

Data location. Workspace data for production customers is stored in the Supabase Mumbai, India region. Uploaded files and photos are stored in the same region. If your company is subject to data-residency or cross-border-transfer rules (for example under the Saudi PDPL or the UAE PDPL), that location is the fact you need to assess; we will answer questions about it plainly at info@muthari.com.

6. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS) for all traffic, hashed passwords, tenant-scoped data access, and role-based permissions inside your workspace. No method of transmission or storage is 100% secure, but we work continuously to protect the Service and will notify affected customers without undue delay if we become aware of a data breach involving their data.

7. Data retention and deletion

We retain your workspace data for as long as your account is active. If your subscription or trial ends, we retain the data for a reasonable grace period so you can reactivate or request an export, after which it may be deleted. You may request deletion of your account and workspace data at any time by writing to us, and we will action it within a reasonable period, subject to any legal record-keeping obligations.

8. Cookies and local storage

The Service uses browser local storage to keep you signed in and to remember interface preferences. We do not use advertising cookies or third-party tracking pixels.

9. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete personal information we hold about you. To exercise any of these, contact us at info@muthari.com. We will respond within a reasonable period.

10. Client reference and logo use

Unless you ask us not to, we may identify your company as a Muthari customer and display your company name and logo on our website and in our marketing materials as a client reference. We will always present your brand respectfully and will never disclose your workspace data, project details, or commercial information as part of any reference. You may decline or withdraw this permission at any time by emailing info@muthari.com, and we will remove your name and logo within a reasonable period.

11. Who can use the Service

The Service is a business tool intended for use by companies and their authorised personnel. It is not directed at children, and we do not knowingly collect information from anyone under 18.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify workspace administrators by email or through the Service. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact us

For any questions about this policy or your data, contact:

Muthari
Email: info@muthari.com

14. Open-source software we include

Muthari is built on open-source components. Their copyright notices and full licence texts are published at muthari.com/licenses.html, so the notice travels with the software as those licences require. We do not modify these components.

15. The Muthari GPS Camera mobile apps

Muthari GPS Camera is a free tool published for iOS and Android, and for the browser at muthari.com/camera. This section describes the mobile apps specifically, because app stores require it to be stated plainly and because the answer is unusually short.

The apps collect nothing. They have no account, no sign-in and no server. They send no analytics, no crash reports and no identifiers. Neither app contains any code that transmits data anywhere, so there is no Muthari system that receives your photographs, your position or anything else you type into them.

What the apps read, and why:

Where it all stays. Photographs, the PDF report and the three remembered fields (project, location, photographed by) are held on your device and nowhere else. Nothing leaves the phone until you choose to send it, and when you do, it goes wherever you send it — the app is not a party to that.

Deleting it. Uninstalling the app removes the remembered fields and anything it still held. Photographs you already saved to your camera roll belong to you and stay there; the app does not manage or remove them.

Children. These are work tools for construction sites. They are not directed at children and collect nothing from anyone.