1. Who we are
MineBook is operated by MineBook (Private) Limited, a company incorporated in Sri Lanka. In this policy, “MineBook”, “we” and “us” mean MineBook (Private) Limited.
For any privacy question or request, contact privacy@minebook.lk.
2. The law we follow
We handle personal data in line with the laws of the Democratic Socialist Republic of Sri Lanka, including the Personal Data Protection Act, No. 9 of 2022 (as amended by Act No. 22 of 2025), and any rules or guidelines issued by the Data Protection Authority of Sri Lanka. Where a stricter law applies to you, we will also respect it.
3. Data we collect
- Account data: your name, email address and password (stored only as a secure hash). If you sign in with Google, we receive your name, email address and profile picture from Google. We never see your Google password.
- Workspace data: what you and your team enter into MineBook, such as sites, work areas, workers, equipment, shift plans, operational records, handovers, drawings, 3D models and blast designs.
- Usage and device data: log-in times, IP address, browser type and error logs, used to keep the service secure and working.
- Support data: messages you send us.
Workspace data may include names and employee IDs of workers you record. You are responsible for having a lawful basis to enter that information.
4. How we use your data
- To create and run your account and provide MineBook’s features.
- To keep the service secure, prevent misuse and investigate problems.
- To send important service messages, such as security alerts or changes to these policies.
- To improve MineBook using aggregated information that does not identify you.
- To meet our legal obligations.
We do not sell your personal data, and we do not use your workspace data for advertising.
5. How we protect your data
All data is encrypted in transit and at rest. Connections to MineBook use HTTPS (TLS), and stored data and backups are encrypted on our servers. Access is limited by site and role, every change to operational records is logged, and backups are tested regularly. See our Security page for more detail.
7. Where your data is stored
Your data may be stored on servers inside or outside Sri Lanka. When personal data is transferred outside Sri Lanka, we only do so in the ways permitted by the Personal Data Protection Act, No. 9 of 2022 (as amended by Act No. 22 of 2025), with appropriate safeguards in place.
Companies that need data to stay on their own infrastructure can use MineBook Enterprise on their own servers.
8. How long we keep data
- We keep your account and workspace data while your account is active.
- Operational records are corrected or voided with an audit trail rather than deleted, so that shift history stays reliable.
- If you close your account, we delete or anonymise your data within 90 days, except where the law requires us to keep it longer. Encrypted backups are overwritten within a further 90 days.
9. Your rights
Under Sri Lankan data protection law you can ask us to:
- Give you access to the personal data we hold about you.
- Correct or complete inaccurate data.
- Erase your data, where the law allows.
- Stop or restrict certain processing, or withdraw your consent.
- Review a decision made only by automated means that affects you.
Email privacy@minebook.lk. We will reply within one month. If you are not satisfied, you can complain to the Data Protection Authority of Sri Lanka.
10. Data breaches
If a breach affects your personal data, we will notify you and the Data Protection Authority of Sri Lanka without undue delay and within the time required by law, and explain what happened and what we are doing about it.
11. Children
MineBook is a professional tool and is not intended for anyone under 18.
12. Changes to this policy
We will post any changes on this page and update the date at the top. For significant changes, we will also tell you by email or in the app before they take effect.