Privacy Policy

1. Scope

This policy explains how Utabiri collects, uses, stores and shares your personal data when you use our website and services. We process personal data in accordance with the Kenya Data Protection Act, 2019.

2. Data we collect

Account data: full name, email address and password (stored only as a salted hash).

Activity data: comments you post, users you follow, and the interest tags you set for personalized insights.

Technical data: IP address, device and browser information, and security logs used to protect your account.

3. Why we process it

To operate your account, personalize the insights and recommendations you see, verify your email, detect fraud and abuse, meet legal obligations, and send service notifications.

4. Sharing

We share data only with our email delivery provider (to send service messages) and regulators or law enforcement where the law requires. We do not sell your personal data.

5. Retention

Account and activity records are kept for as long as your account is active and thereafter for the period required by Kenyan law. Security logs are kept for up to 12 months.

6. Security

Passwords are hashed with a modern memory-hard algorithm and traffic is encrypted in transit. No system is perfectly secure — protect your password and report any suspicious activity immediately.

7. Your rights

Under the Data Protection Act you may request access to, correction of, or deletion of your personal data; object to certain processing; and lodge a complaint with the Office of the Data Protection Commissioner. To exercise any right, email privacy@utabiri.co.ke — we respond within the statutory timelines.

8. Cookies

We use strictly necessary cookies and local storage to keep you logged in and remember preferences. We do not use third-party advertising cookies.

9. Changes

We may update this policy as the service evolves; material changes will be announced in the app before they take effect.