Privacy Policy — Mo'chefe
Last updated: 10 May 2026. This is a courtesy translation. The Portuguese version is authoritative; in case of conflict, the Portuguese text prevails. → Ver versão em português
1. Who we are
Mo'chefe is a household and domestic-staff management application aimed at families resident in Angola. We help your household coordinate attendance, tasks, schedule, payroll, and pantry inventory.
Mo'chefe is a trading name; the registered legal entity in Angola is being formed and will be referenced here once registered.
For any question about this Policy, or to exercise your rights, write to legal@mochefe.com. All postal correspondence should be addressed to the same email.
2. How this Policy applies to you
Mo'chefe acts as a service provider to the Subscriber that registers your household and collects your information solely to provide the contracted services. This Policy describes Mo'chefe's practices — not the practices of the household you work for. For questions about how the household that employs you uses your data, please contact your Employer directly.
This Policy uses three distinct terms, even though, in most households, all three refer to the same person:
- Subscriber — the contracting party who creates the Mo'chefe account and pays for the subscription. The Subscriber is the only party with whom Mo'chefe has a contractual relationship.
- Employer — the legal employer of the domestic worker within the meaning of Lei 12/23 and Decreto Presidencial 155/16.
- Household — the physical premises and operational unit (address, geofence, attendance methods, workers).
In a typical MVP-stage household, the same person is, simultaneously, Subscriber, Employer, and head of the Household. In more complex arrangements (compounds, groups of households, enterprises) these roles may be held by different parties.
Mo'chefe is used by two kinds of people:
- The Subscriber (typically also the head of the household) — creates the account, registers the household, and adds workers.
- The domestic worker working in a registered household, who uses the app to clock in and out, view tasks, view the schedule, and view their pay.
3. What data we collect
We collect only what the application needs, and nothing more. Below, by category.
Identification and contact. The name and phone number of registered users. The email only of the Subscriber, used to sign in and to receive communications about the account. The worker's phone is used once at the moment of pairing to the household, with a short code provided by the head of the household; the number is not used for marketing nor shared with third parties.
Household data. The name by which the household is identified in the app (e.g. "Casa Silva"), its address, and its GPS coordinates. If the household has configured Bluetooth or Wi-Fi to confirm worker presence, the elements needed for that confirmation are also stored. These elements only serve to confirm that the worker is physically at the household at clock-in and clock-out — they are not used for any other purpose.
Domestic-work contract data. The role (cook, driver, nanny, gardener, security, domestic worker, teacher, other), the agreed salary along with currency and frequency, and contract start and end dates. This data is entered by the Employer, who has the legal duty to maintain a written contract under Decreto Presidencial 155/16.
Attendance data. The exact time of each clock-in and clock-out, the GPS location at that exact moment, and the verification method used to confirm presence (Wi-Fi, Bluetooth, phone biometric, NFC, or PIN). Mo'chefe also records, when the system detects it, the indication that the location appears to have been falsified — information used to detect attendance fraud. Mo'chefe does not record the worker's location continuously during work hours, except where a household has activated specific consented tracking features (such as scheduled vehicle tracking for drivers).
Household-activity data. Tasks with their deadlines and notes; calendar events classified by category (e.g. "child activity", "delivery", "maintenance", "medical"); the frequent locations the head of the household chooses to register for trip planning (children's school, grandparents' home, supermarket); pantry inventory; meal plans; vacation requests with their declared reason; and household-bill reminders (electricity, water, condominium fees). These data exclusively serve the household's internal coordination.
Financial data. The agreed salary and the payroll Mo'chefe computes from attendance — periods, amounts, deductions, bonuses. Mo'chefe computes the payroll; it does not make direct payments to the worker. Payment continues to be made by the Employer through the usual means.
Data we do NOT collect
Mo'chefe is designed to minimise sensitive information.
- We do not collect children's names, ages, or photographs. Calendar events about children are tagged by category without identifying the child. A school address is recorded only if the head of the household explicitly registers it as a "frequent location."
- We do not collect your fingerprint or face. For the purpose of this Policy, "biometric data" generally means a fingerprint, face image, or other unique physical datum. When the household you work for activates phone-biometric verification, it is your own phone that confirms whether the fingerprint or face matches. Mo'chefe receives only the "yes" or "no" response — never the fingerprint or photograph. For this reason, most users will not see Mo'chefe processing any biometric data of theirs in the proper sense of the term.
- We do not collect identity documents (national ID, passport, tax number) at this stage.
- We do not access the camera or microphone.
4. Why we collect each datum
Each data category has a declared purpose. Your information is not used for purposes not described in this Policy.
| Purpose | Data used |
|---|---|
| Let you sign in and use the app | Identification and contact |
| Confirm your presence at the household at clock-in and clock-out | Household data, attendance data |
| Calculate your pay and generate the payroll | Contract data, attendance data |
| Coordinate tasks, schedule, pantry, and meals | Household-activity data |
| Detect fraudulent records (false clock-ins) | Attendance data |
| Keep an internal change history to resolve disputes | Internal copy of changes made |
| Communicate with you about your account |
Mo'chefe does not sell, rent, or share your data with third parties for marketing, advertising, or profiling. There are no advertisements in the application. We do not build profiles about you for any purpose other than the direct provision of the service described in this Policy. When new purposes arise, this Policy will be updated and the change communicated before any new processing.
5. The legal basis on which we process your data
Mo'chefe processes your data under Lei 22/11 — the Angolan Personal Data Protection Law. For domestic-worker data, Decreto Presidencial 155/16 (the legal regime for domestic work) and Lei 12/23 — the General Labour Law also apply.
The legal basis varies by purpose:
- The Subscriber's account rests on the Subscriber's free consent. The account may be closed at any time.
- Attendance recording and pay calculation rest on the contractual necessity of the domestic-work employment relationship — without attendance, there is no pay calculation, and the Employer has the legal duty to pay the agreed salary.
- Phone-biometric authentication is optional and rests on the worker's explicit consent. The default clock-in method is Bluetooth + PIN; biometric may be refused with no employment consequence. The household cannot configure biometric as the only entry method without the worker's explicit consent.
- The internal change history rests on the legitimate interest of resolving disputes and detecting irregularities.
We recognise that consent given in an employment context may not be fully free, given the power imbalance between the Employer and the worker. For that reason, wherever possible we ground the processing of worker data in contract necessity rather than consent, and we keep biometric authentication optional and refusable with no consequence.
6. Who we share with
To run the application we use a small number of providers that process data on our behalf:
- Stripe, if the Subscriber chooses to pay the Mo'chefe subscription by international card. In that case we share with Stripe the name and contact details necessary to process the payment. The name "Stripe" will appear on the bank statement.
- A local payment provider, if the Subscriber chooses to pay by Angolan bank reference. The specific provider is identified in the payment flow itself, at the time you make the payment.
- Infrastructure providers that host the application and synchronise data between your devices.
Mo'chefe chooses its providers carefully: each one processes only the data strictly necessary for the contracted purpose and is subject to confidentiality and security obligations.
Mo'chefe does not sell, rent, or share your data with third parties for marketing, advertising, or profiling. There are no advertisements in the application, and we do not intend that to change.
7. International transfer
Mo'chefe processes and stores data on infrastructure that may be located outside Angola. Where this involves transfer to a country that has not been recognised as offering an adequate level of protection, Mo'chefe relies on lawful grounds permitted by Article 34 of Lei 22/11, including the data subject's express consent and contractual safeguards with the relevant providers.
8. How long we keep your data
The general rule is simple: we keep each datum only for as long as the purpose that justified its collection requires, plus the period Angolan law requires to resolve any disputes. Attendance records and payroll have a specific regime, because they support worker rights that need proof during the labour-prescription period.
| Category | Period |
|---|---|
| Subscriber account data | While the account is active, plus 90 days after closure. |
| Worker identification | While you work at the household, plus the period required by Angolan labour law to resolve any pay or attendance dispute. |
| Attendance and payroll records | Same regime — these records support payment, and their premature deletion would prevent the worker from proving worked days in a dispute. |
| Internal change history | Same regime as the data it refers to. |
| Technical logs (sessions, errors) | 30 to 90 days. |
When handling an erasure request relating to attendance or payroll records, Mo'chefe replaces your identifying information with an anonymous marker (e.g. "former employee #X"). Operational records continue to exist to support the pay already calculated, but no longer identify you. This approach protects the worker — preserves the proof of days worked — without keeping in our system personal data that is no longer necessary.
9. Your rights
Under Lei 22/11 you have the right to:
- Access the data we hold about you;
- Rectify, update, and erase incorrect or out-of-date data;
- Object to processing where there are weighty and legitimate reasons;
- Withdraw consent where processing is consent-based (e.g. biometric);
- Lodge a complaint with the Data Protection Agency (see section 12).
To exercise any of these rights, write to legal@mochefe.com. We respond within 15 days. To confirm your identity, we may ask for additional information.
10. Children
Mo'chefe is not directed to children. Accounts are for adults (18 or older). The application is designed to minimise children's data exposure, and that minimisation is structured into the very way the application was built:
- We do not collect or store children's names, ages, or photographs. The application does not even have a field to register a child as an identified person.
- Calendar events about children are tagged by category — for example, "child activity", "swimming", "medical appointment" — without identifying which child is involved.
- A children's school address is recorded only if the head of the household decides to register it as a "frequent location" for driver-route planning. Even then, the record is controlled by the head of the household and may be deleted at any time.
Information addressed to minor recipients must be clear, precise, and objective, per article 25 of Lei 22/11. For that reason, we chose to avoid, from the outset, any collection of children's identifying data. If you are the parent or guardian of a child whose information you believe is being processed in Mo'chefe, please contact us.
11. How we protect your data
Your data travels encrypted between your phone or computer and our systems. It is held on infrastructure that is also encrypted. Access controls prevent one household's data from being shown to another. Administrative access to our systems requires two-factor authentication and is logged. An internal change history records every modification, so we can detect and respond to unauthorised access.
No system is fully secure. If an incident may affect your data, we will communicate with you within the timeframe set by applicable notification obligations and describe the measures we have taken.
12. Complaints
If you believe your rights have not been respected by Mo'chefe, please contact us first at legal@mochefe.com — almost all issues resolve quickly. You also have the right, under Lei 22/11, to lodge a complaint with the Angolan supervisory authority, the Agência de Protecção de Dados (APD).
13. App permissions
The Mo'chefe mobile app requests the following permissions from your phone. If you refuse a permission, the feature that depends on it will be unavailable, but the rest of the app will work.
- Location — to confirm your presence at the household at clock-in and clock-out. If the household configures Bluetooth or Wi-Fi as the primary method, this permission may be optional.
- Bluetooth and Wi-Fi — to confirm your presence at the household at clock-in and clock-out, if your household has configured these methods.
- Phone biometric (fingerprint or face) — optional. Mo'chefe does not require biometric by default.
Mo'chefe does not request access to the camera, microphone, contacts, photos, calendar, or SMS.
14. Updates to this Policy
This Policy may be updated as Mo'chefe evolves. The date at the top of the document shows when it was last updated. If the change is material — for example, a new data category, a new service provider, a change of infrastructure location — we will notify you by email and in-app before it takes effect.
15. Governing law
This Policy is governed by Angolan law, in particular Lei 22/11, Lei 7/24, Lei 12/23, and Decreto Presidencial 155/16.
Português