Legal

Privacy Policy

Last updated: 23 July 2026

Who we are

mzizi (mzizi.dev) is the open component registry, brand system, and 3D frontend architecture of the Mzizi design system — an open-architecture project governed by the Bundu Foundation and operated by nyuchi (Nyuchi Africa (Pvt) Ltd). This policy explains what data mzizi.dev handles when you browse the site or use its public API and Model Context Protocol (MCP) server.

Product and engineering documentation is published on the official documentation portal at docs.nyuchi.com.

What we collect

mzizi.dev is a public, anonymous-read surface. There are no user accounts on the site, and we do not ask you to sign in to read the registry, brand data, architecture, or documentation. Specifically:

No personal accounts. Browsing the site, the registry, or the API requires no login and collects no personal profile.
Aggregate usage telemetry. We record anonymous, aggregate counts of API and MCP usage (for example, which endpoints are called and how often) to operate the service and publish open metrics. This telemetry is not tied to your identity and is surfaced publicly on our observability dashboard.
Standard server logs. Our hosting providers process routine request metadata (IP address, user agent, timestamp) transiently for security, abuse prevention, and reliability.
MCP connector sign-up. Connecting to the hosted MCP server (mcp.mzizi.dev) is fronted by a free WorkOS Connect sign-up. If you choose to connect, WorkOS processes the identity you register with under its own privacy terms; mzizi.dev receives only the minimum needed to authorise your session.

Cookies and local storage

mzizi.dev does not use advertising or cross-site tracking cookies. The site stores a small amount of data in your browser's local storage to remember your theme preference (light/dark) and to cache the component registry so pages load quickly. You can clear this at any time from your browser settings.

How we use data

We use the limited data above only to operate, secure, and improve the registry and its APIs, and to publish open, aggregate usage statistics for the community. We do not sell personal data, and we do not build advertising profiles.

Service providers

mzizi.dev runs on infrastructure operated by trusted providers who process data on our behalf: Supabase (database and document store), Cloudflare (the MCP worker and edge delivery), Vercel (site hosting), and WorkOS (the optional MCP connector sign-up). Each processes data under its own terms and applicable data-protection obligations.

Data sovereignty

Data sovereignty is a core value of the Bundu ecosystem. We collect the minimum data required to run an open, public registry, keep telemetry anonymous and aggregate, and publish it as open data so the community can audit how the service is used.

Your rights

Because mzizi.dev holds no personal accounts and no identifiable profiles, there is generally no personal data to access, correct, or delete. If you have connected via the MCP sign-up and want your WorkOS identity removed, or you have any other privacy request, contact us and we will act on it promptly.

Children

mzizi.dev is a developer tool and is not directed at children. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected by the “last updated” date above, and significant changes will be noted in our documentation and changelog.

Contact

Questions about this policy can be raised through the official documentation portal at docs.nyuchi.com or by opening an issue at github.com/nyuchi/mzizi.