Privacy Policy

1. Who We Are

Inuka Kenya Ni Sisi! ("we", "us", "our") operates the Inuka! Angaza Kura platform (angazakura.org), a civic technology platform for alternative leadership discovery, election observation, and incident reporting in Kenya. We are committed to protecting the privacy and personal data of our users in accordance with the Kenya Data Protection Act, 2019.

2. Information We Collect

We collect information in the following ways:

• Account registration: Name, email address, and role.
• Observer assignments: The polling station or registration centre you choose to observe.
• Incident reports: Description, location, severity, supporting media attachments, and timestamp.
• Nominations: Nominee details, and your stated reason for the nomination.
• Organisation requests: Organisation name, type, coverage areas, and lead contact details.
• Voter experience forms: Responses you submit about your experience at a polling or registration centre.
• Usage data: Browser type, IP address, pages visited, and session duration, collected automatically via server logs and analytics.

3. How We Use Your Information

• To operate and provide the platform's features.
• To verify the identity of observers and organisations.
• To display incident reports and investigations on the public platform.
• To send transactional emails (e.g. nomination confirmations, invitation links).
• To improve the platform through aggregated usage analytics.
• To comply with legal obligations and respond to lawful requests from authorities.

We do not use your personal data for advertising or sell it to third parties.

4. Sharing of Information

We share personal data only in the following limited circumstances:

• With your organisation: Your organisation administrator can view your profile and assignments.
• Public incident reports: Incident descriptions, severity, and location are public. Your name is shown only if you have chosen to make it visible.
• Service providers: We use third-party services for email delivery, cloud hosting, and media storage, all operating under data processing agreements.
• Legal compliance: We may disclose information if required by law or court order.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Incident reports and investigation materials are retained indefinitely as public records of electoral accountability. You may request deletion of your account and associated personal data at any time (see Your Rights below), except where retention is required by law or the data forms part of a published public record.

6. Security

We implement industry-standard security measures including HTTPS encryption in transit, hashed password storage, access controls, and regular security reviews. No system is perfectly secure; please use a strong, unique password and notify us immediately at hello@angazakura.org if you believe your account has been compromised.

7. Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Delete your personal data (subject to lawful retention obligations).
• Object to processing of your data for certain purposes.
• Portability — receive your data in a machine-readable format.

To exercise any of these rights, email hello@angazakura.org. We will respond within 21 days.

8. Cookies

We use session cookies to keep you logged in and CSRF cookies to protect form submissions. We do not use third-party advertising cookies. Analytics cookies, if any, are strictly anonymised and used only to improve the platform experience.

9. Third-Party Links

The platform may contain links to external sites (e.g. IEBC voter verification). We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing personal data.

10. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via the platform or email. Your continued use of the platform after the effective date constitutes acceptance of the revised policy.

11. Contact

For privacy-related enquiries, contact our data controller at privacy@angazakura.org.