Your data and your rights
We collect the minimum needed to keep one person, one vote honest: a username, a password, a phone number and either your national ID or your name and island. No email, no tracking, no advertising.
How it is stored
- Direct identifiers (national ID and phone) are encrypted at rest with AES-256-GCM when the operator has configured a key. Encryption is on.
- Duplicate detection never needs to read your raw ID: it compares a keyed HMAC, never a plaintext value.
- Every time a human reveals your identity for review, it is written to a private access log.
- Raw IP addresses are never stored; only a keyed hash, for abuse control.
Retention
Identity records are kept while you are a member and for up to 3,650 days after you leave, then purged. You can erase sooner yourself, below.
Your rights
Access & portability
Download everything we hold about you as JSON from /api/account/export (sign-in required).
Erasure
Erase your identity and merit from your score page. Your votes and gifts already made remain in the public aggregate, but nothing links back to you.
Correction
Ask any admin to correct a wrong detail after verification.
No automated decisions
Membership decisions are made by a human admin, and every admin action is audit-logged and appealable.
Legal basis for the filing gate
Elections Commission of the Maldives — political party registration requirements (members, signatures and deposit). Confirm the current figures with the Commission before filing.
This page describes what the platform does technically. It is not legal advice; the operator should publish a jurisdiction-specific privacy notice before collecting real member data.