1. Who we are
Kirinyaga Yetu is the data controller for personal data processed through the app. This policy explains what we collect and your rights under the Data Protection Act, 2019.
2. Information we collect
Account details (name, email, phone); seller details (business/co-operative name, registration number, ward); your listings and reports; basic device and usage data; and your location only when you choose to tag a report.
3. Why we use it (lawful basis)
To operate the service, verify sellers, prevent fraud and abuse, respond to reports, and comply with the law. Our lawful bases are your consent and our legitimate interests, as recognised under the Data Protection Act, 2019.
4. Sharing
We share information with other users only as needed to complete a listing or contact (e.g. seller name and location), with trusted service providers (such as hosting and SMS), and with authorities where required by law. We do not sell your personal data.
5. Storage & retention
We keep personal data only as long as necessary for the purposes above and protect it with appropriate technical and organisational safeguards.
6. Your rights
Under the Data Protection Act, 2019 you may access, correct, or delete your data, object to processing, and withdraw consent. You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC). You can delete your account anytime in the app under More → Account → Delete account.
7. Children
The app is intended for users aged 18 and above.
8. Changes & contact
We may update this policy and will note the date of change. Contact us at mykirinyaga.support@gmail.com