Privacy Policy

Effective Date: September 16, 2026

Last Updated: September 16, 2026

1. Introduction and Scope

This Privacy Policy explains how DiaFi LLC, doing business as Damani (“Damani,” “we,” “us,” or “our”), a company incorporated in the State of New Mexico, United States, collects, uses, discloses, and protects personal information when you use the Damani mobile application and related services (the “Service”). Damani's users are located worldwide, including in the United States, South Africa, and other countries; this Policy is intended to apply globally, with jurisdiction-specific rights described in Section 10.

By using the Service, you acknowledge that your personal information will be processed as described in this Policy, including transfer to and processing in the United States, where the Company and its service providers are located.

2. Information We Collect

2.1 Information You Provide Directly

Account information: name, email address, phone number, password, and profile details.
Role-specific information: for Sponsors, venture details such as business name, industry, funding target, stage, traction, financial metrics, supporting documents, and images; for Investors, stated investment interests, capacity, and background.
Identity and verification information collected as part of our vetting process, which may include government-issued identification, business registration documents, or references.
Communications: messages you send to other Users or to Damani through the Service, and any correspondence with our support team.
Payment information: if you purchase a Subscription, billing details are collected and processed by our third-party payment processor; Damani does not store full payment card numbers.

2.2 Information Collected Automatically

Usage data: pages and features accessed, actions taken (such as expressing interest in a venture), and timestamps.
Device and log data: device type, operating system, IP address, unique device identifiers, and app version.
Cookies and similar technologies, as described in Section 6.

2.3 Information from Third Parties

We may receive information about you from other Users (for example, if another User refers you or mentions you in a message), from our vetting or identity-verification partners, or from publicly available sources used to support our review process.

3. How We Use Information

We use personal information to:

Create and administer your account;
Operate the core networking functionality of the Service, including displaying Sponsor listings to Investors and enabling in-app messaging;
Conduct vetting and review of Sponsors and Investors;
Process Subscription payments and manage billing;
Communicate with you about your account, updates to the Service, or customer support;
Monitor, investigate, and prevent fraud, misrepresentation, and violations of our Terms and Conditions;
Analyze and improve the Service; and
Comply with legal obligations, including responding to lawful requests from public authorities.

4. Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases to process your personal information: performance of a contract with you (to provide the Service); our legitimate interests (such as vetting, fraud prevention, and improving the Service), balanced against your rights; your consent, where required (for example, for certain marketing communications or cookies); and compliance with our legal obligations.

5.1 With Other Users

The core function of Damani is to connect Sponsors and Investors. Profile and venture information you submit is, by design, shared with other vetted Users of the Service consistent with your role and settings — for example, a Sponsor's venture listing is visible to Investors, and an Investor's expression of interest and message are visible to the relevant Sponsor.

5.2 Service Providers

We share information with third-party vendors who perform services on our behalf, including cloud hosting providers, payment processors, identity-verification and vetting partners, analytics providers, and customer support tools. These providers are authorized to use your information only as necessary to provide services to us.

5.3 Legal and Safety

We may disclose information where required by law, subpoena, or other legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of Damani, our Users, or the public, or to investigate fraud or violations of our Terms.

5.4 Business Transfers

If Damani is involved in a merger, acquisition, financing, or sale of all or a portion of its assets, personal information may be transferred as part of that transaction, subject to standard confidentiality arrangements.

5.5 No Sale of Personal Information

Damani does not sell personal information to third parties for their own independent marketing purposes.

6. Cookies and Tracking Technologies

The Service may use cookies, mobile device identifiers, and similar technologies to keep you logged in, remember preferences, and understand how the Service is used. You can control cookies through your browser or device settings; disabling certain cookies may affect the functionality of the Service. [EXPAND WITH SPECIFIC COOKIE CATEGORIES / CONSENT MECHANISM ONCE ANALYTICS AND ADVERTISING TOOLS ARE FINALIZED.]

7. Data Retention

We retain personal information for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Venture and profile information may be retained for a reasonable period after account closure to support vetting integrity, fraud prevention, and legal compliance, after which it will be deleted or anonymized.

Data category	Retention Schedule
Account/profile data	Duration of account + 90 days after deletion
Venture/listing data (Sponsors)	Duration of listing + 12 months after removal
Messages between Users	Duration of account + 90 days after deletion
Usage/analytics data	24 months
Payment/billing records	7 years
Vetting/KYC documents	24 months after account closure

8. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

Damani is based in the United States, and personal information collected through the Service is processed and stored in the United States (and any other countries where our service providers operate). If you are located outside the United States, including in South Africa or the European Economic Area, your information will be transferred to, and processed in, the United States, which may not have the same data protection laws as your home country. Where required, we will implement appropriate safeguards for such transfers (for example, standard contractual clauses for transfers from the EEA, and compliance with applicable cross-border transfer conditions under South Africa's Protection of Personal Information Act (POPIA)).

10. Your Rights and Choices

Depending on your location, you may have some or all of the following rights regarding your personal information: to access the personal information we hold about you; to correct inaccurate information; to request deletion of your information; to object to or restrict certain processing; to receive a copy of your information in a portable format; and to withdraw consent where processing is based on consent. To exercise these rights, contact us at admin@damani.app - We will respond within the timeframe required by applicable law.

10.1 European Economic Area / UK Users

If you are located in the EEA or UK, you have the rights described above under the General Data Protection Regulation (GDPR) or UK GDPR, and you have the right to lodge a complaint with your local data protection authority.

10.2 South African Users

If you are located in South Africa, you have rights under the Protection of Personal Information Act, 2013 (POPIA), including the right to access and correct your personal information and to lodge a complaint with the Information Regulator of South Africa.

10.3 California Residents

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), as amended, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale or sharing of personal information (Damani does not sell personal information). To exercise these rights, contact us at admin@damani.app.

10.4 Other Jurisdictions

Nigeria, Kenya, Ghana, Tanzania, Botswana

11. Children's Privacy

The Service is not directed to, and is not intended for use by, anyone under the age of 18. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected personal information from someone under 18, we will take steps to delete it.

12. Third-Party Links

The Service may contain links to third-party websites or services, including those of vetting partners, payment processors, or resources referenced in a roadmap document. This Policy does not apply to those third-party services, and we encourage you to review their privacy policies separately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service or by email prior to the changes taking effect. The “Last Updated” date at the top of this Policy indicates when it was last revised.

14. Contact Us

If you have questions about this Privacy Policy or how your information is handled, please contact us at:

DiaFi LLC (d/b/a Damani)

1209 Mountain Road Pl Ne, Ste N Albuquerque, NM 87110 US

Email: admin@damani.app