Privacy Policy

The policy that applies

Sibasi Ltd is the data controller for Monival. The corporate privacy policy sets out what we collect, why, how long we keep it, who we share it with, where it is stored, and the rights you can exercise over it. It applies in full to your use of Monival.

Read the Sibasi Privacy Policy

What this means for monitoring and evaluation data

These points are specific to Monival. They sit alongside the corporate policy and do not replace it — where the two could be read differently, the corporate policy governs.

• Programme data belongs to the implementing organisation. Indicator results, beneficiary records and survey responses you collect through Monival are yours. Your organisation is the data controller for them; Sibasi is the processor.
• Beneficiary data can be sensitive. M&E data often describes vulnerable people, sometimes in humanitarian contexts. We do not use it for our own analysis, and we do not pool it across organisations.
• Field collection and offline sync. Data captured offline is held on the collecting device until it syncs. Device security is part of your deployment — the corporate policy explains our side of the arrangement.
• Donor reporting goes where you direct. Exports and reports are produced on your instruction. We do not share programme data with funders or third parties on our own initiative.

Exercising your rights

To access, correct, export or delete personal data, or to ask how it is handled, contact [email protected]. The corporate policy explains the routes available to you and the timeframes we work to.