Privacy Policy

1. Introduction

Welcome to our application (the "App"). This Privacy Policy describes how we ("we", "us", or "our") collect, use, disclose, and safeguard your information when you download, install, access, or use our mobile application available on the Google Play Store, including any related services, features, content, and websites (collectively, the "Service").

We are committed to protecting your privacy and handling your personal data in an open and transparent manner. By using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

This policy is designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Children's Online Privacy Protection Act (COPPA), Kenya's Data Protection Act, 2019, and the Google Play Developer Program Policies.

2. Information We Collect

We collect several different types of information for various purposes to provide and improve our Service to you.

2.1 Personal Information You Provide

When you register, sign up, or interact with the App, we may collect personally identifiable information, including but not limited to:

• Name and username
• Email address
• Phone number
• Postal address and country of residence
• Date of birth and gender (where applicable)
• Profile picture or avatar
• Account credentials (passwords are stored in encrypted form)
• Payment information (processed via secure third-party payment processors)
• Content you submit, post, or upload through the App
• Communications with us, including support requests and feedback

2.2 Information Collected Automatically

When you use the App, we automatically collect certain information, including:

• Device Information: Device model, manufacturer, operating system version, unique device identifiers (such as Android Advertising ID), mobile network information, and device language settings.
• Log and Usage Data: IP address, access times, app crashes, pages and features viewed, the time spent on those features, and other diagnostic data.
• Location Information: With your permission, we may collect precise (GPS) or approximate (network-based) location data to provide location-based features.
• Cookies and Similar Technologies: We use cookies, web beacons, pixels, and similar tracking technologies to track activity on our Service and store certain information.
• Performance Data: Information about how the App performs on your device, including crash reports and performance metrics.

2.3 Information from Third Parties

We may receive information about you from third-party services, including:

• Social media platforms when you sign in using social login (e.g., Google, Facebook)
• Analytics providers such as Google Analytics for Firebase
• Advertising partners and networks
• Payment processors regarding transaction status

2.4 Permissions Requested

Our App may request the following permissions on your device. You may grant or deny these permissions, though some App features may not function properly without them:

• Camera: To capture photos or videos for use within the App.
• Storage: To save and retrieve files, images, and other data.
• Location: To provide location-based services and features.
• Contacts: To enable features that involve sharing or interacting with your contacts (where applicable).
• Microphone: For voice input or audio recording features (where applicable).
• Notifications: To send you push notifications about updates, alerts, and relevant content.
• Internet Access: Required for the App to communicate with our servers and provide its features.

3. How We Use Your Information

We use the information we collect for various legitimate purposes, including to:

• Provide, operate, and maintain the App and its features
• Create and manage your account
• Process transactions and send transaction-related communications
• Personalize your experience and deliver tailored content
• Improve, update, and enhance our Service and develop new features
• Communicate with you, including responding to inquiries and providing customer support
• Send administrative notifications, updates, security alerts, and support messages
• Send marketing communications (where you have consented or as otherwise permitted by law)
• Monitor and analyze usage patterns and trends to improve user experience
• Detect, prevent, and address technical issues, fraud, or illegal activity
• Enforce our Terms of Service and other agreements
• Comply with legal obligations and respond to lawful requests from authorities

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar requirements, we process your personal data based on the following legal grounds:

• Consent: Where you have given us explicit permission to process your data for specific purposes.
• Contract: Where processing is necessary to perform a contract with you or to take steps at your request before entering a contract.
• Legal Obligation: Where processing is required to comply with a legal or regulatory obligation.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided they are not overridden by your rights and freedoms.
• Vital Interests: Where processing is necessary to protect someone's life or safety.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who perform services on our behalf, such as cloud hosting, analytics, payment processing, customer support, email delivery, and advertising. These providers are contractually obligated to protect your information.

5.2 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal data.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), or to protect our rights, property, or safety, or that of our users or others.

5.4 With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so.

5.5 Aggregated or Anonymized Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, marketing, analytics, or other purposes.

6. Third-Party Services and SDKs

Our App may integrate with third-party services, software development kits (SDKs), and APIs. These third parties have their own privacy policies governing their use of your information. They may include:

• Google Play Services: For app distribution, in-app purchases, and core platform functionality.
• Firebase / Google Analytics: For app analytics, crash reporting, and performance monitoring.
• Google AdMob: For displaying advertisements within the App (where applicable).
• Facebook SDK: For social login, sharing, and analytics (where applicable).
• Payment Processors: Such as Google Pay, Stripe, PayPal, or M-Pesa for handling transactions.
• Cloud Storage Providers: For storing user data securely.

We encourage you to review the privacy policies of these third parties before providing them with information.

7. Data Retention

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, including:

• To provide you with the Service and maintain your account
• To comply with legal, accounting, or reporting obligations
• To resolve disputes and enforce our agreements
• To prevent fraud and abuse

When we no longer need your personal information, we will securely delete or anonymize it. If deletion is not possible (for example, because your data has been stored in backup archives), we will securely store and isolate it from further processing until deletion is possible.

8. Data Security

We implement appropriate technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Access controls and authentication mechanisms
• Regular security assessments and audits
• Employee training on data protection practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for keeping your account credentials confidential.

9. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your country of residence. These countries may have data protection laws that differ from those of your country. By using the App, you consent to such transfers.

Where required by law, we implement appropriate safeguards for international transfers, such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms.

10. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request that we correct inaccurate or incomplete information.
• Right to Erasure: Request that we delete your personal information ("right to be forgotten").
• Right to Restrict Processing: Request that we limit how we use your information.
• Right to Data Portability: Receive your personal information in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your data.
• Right to Lodge a Complaint: File a complaint with your local data protection authority.
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights (CCPA).

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond within the time frame required by applicable law.

11. Children's Privacy

Our Service is not directed to children under the age of 13 (or the equivalent minimum age in the relevant jurisdiction, such as 16 in parts of the EEA). We do not knowingly collect personal information from children under this age.

If we become aware that we have collected personal information from a child without verifiable parental consent, we will take steps to delete that information promptly. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately so that we can take appropriate action.

12. Advertising and Analytics

We may use third-party advertising and analytics services to display advertisements and analyze app usage. These services may use cookies, advertising identifiers (such as Android Advertising ID), and similar technologies to deliver personalized advertisements based on your interests and activities.

You can opt out of personalized advertising by:

• Adjusting your device's advertising settings (Settings → Google → Ads → Opt out of Ads Personalization)
• Resetting your Advertising ID periodically
• Visiting the Digital Advertising Alliance opt-out page or the Network Advertising Initiative opt-out page

13. Push Notifications

With your permission, we may send you push notifications about updates, promotional offers, or other relevant information. You can opt out of receiving push notifications at any time through your device's notification settings.

14. Do Not Track Signals

Some browsers and devices transmit "Do Not Track" (DNT) signals. Because no common industry or legal standard for DNT signals has been adopted, our App does not currently respond to DNT signals. We will continue to monitor developments around DNT technology.

15. Account Deletion

You may request deletion of your account and associated personal data at any time through one of the following methods:

• Using the in-app account deletion feature (where available)
• Emailing us at the contact address provided below with the subject line "Account Deletion Request"

Upon receiving your request, we will delete your personal information within 30 days, except where retention is required for legal, regulatory, or legitimate business purposes.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post the revised policy within the App and on our website
• For material changes, provide additional notice (such as an in-app notification or email)

We encourage you to review this Privacy Policy periodically. Your continued use of the App after any changes become effective constitutes your acceptance of the revised policy.

17. Contact Us

If you have any questions, concerns, comments, or complaints about this Privacy Policy or our data practices, or if you wish to exercise any of your rights, please contact us:

We will make every reasonable effort to respond to your inquiry promptly and within any time frame required by applicable law.

18. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Kenya, without regard to its conflict of law provisions, and other applicable international data protection laws as relevant to your jurisdiction.