Kiambu Road ("we," "us," "our," or the "Platform") is a dating and social connection service operated by Uju Platforms, based in Nairobi, Kenya. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our website, mobile experience, and related services (collectively, the "Service").

By creating an account or using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide Directly

• Account details: name, email address, phone number, date of birth, gender, password.
• Profile information: photos, bio, interests, preferences, location (town/city), relationship goals, and any other details you choose to add.
• Verification data: government ID or selfie photos, if you opt into identity verification.
• Communications: messages sent to other users, and correspondence with our support team.
• Payment information: when you purchase premium features via M-Pesa or other supported payment methods, we (or our payment processor) collect transaction details. We do not store your full M-Pesa PIN or banking credentials — these are handled directly by the payment provider (e.g., Safaricom/Daraja).

1.2 Information Collected Automatically

• Device and usage data: IP address, device type, operating system, browser type, app version, and general usage patterns (pages visited, features used, session length).
• Location data: approximate location (derived from IP address or, with your permission, GPS) used to show you nearby matches.
• Cookies and similar technologies: used to keep you logged in, remember preferences, and understand how the Service is used. See Section 8.

1.3 Information From Third Parties

• Social login: if you sign up or log in using Instagram or another third-party account, we receive basic profile information (such as name, email, and profile photo) as permitted by that platform and your privacy settings there.
• Payment processors: confirmation of successful or failed transactions, without full card or mobile money credentials.

2. How We Use Your Information

We use the information we collect to:

1. Create and manage your account.
2. Show you potential matches and enable messaging between users.
3. Process payments for premium features and subscriptions.
4. Verify identity and help maintain a safe, authentic community.
5. Send service-related notifications (matches, messages, account activity).
6. Send marketing or promotional communications, where you have consented, and which you may opt out of at any time.
7. Detect, investigate, and prevent fraud, abuse, harassment, and violations of our Terms of Service.
8. Improve and personalize the Service, including through analytics.
9. Comply with legal obligations, including under Kenyan law.

3. Legal Basis for Processing

Where applicable under the Kenya Data Protection Act, 2019, we process your personal data on the following bases:

• Consent — for optional features such as location sharing, marketing communications, and identity verification.
• Contractual necessity — to provide the core matching, messaging, and payment services you sign up for.
• Legitimate interest — for fraud prevention, platform safety, and service improvement.
• Legal obligation — where required to comply with applicable law or a lawful request from authorities.

4. Sharing and Disclosure of Information

We do not sell your personal data. We may share information with:

• Other users: your public profile information (photos, bio, age range, general location) is visible to other users as part of the core matching functionality.
• Service providers: payment processors (e.g., M-Pesa/Daraja), cloud hosting providers, analytics providers, and customer support tools — all bound by confidentiality and data protection obligations.
• Legal and safety purposes: where required by law, court order, or to protect the rights, property, or safety of Kiambu Road, our users, or the public.
• Business transfers: if Uju Platforms is involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction, subject to this policy or a policy offering at least equivalent protections.

5. Data Retention

We retain your personal data for as long as your account is active and as necessary to provide the Service. If you delete your account, we will delete or anonymize your personal data within [Insert Timeframe — e.g., 30 days], except where retention is required to:

• comply with legal, tax, or regulatory obligations;
• resolve disputes or enforce our agreements;
• maintain records of safety-related actions (e.g., banned accounts) to prevent re-registration by users removed for policy violations.

6. Data Security

We implement technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), access controls, and secure storage practices. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at the details in Section 12.

7. Your Rights

Under the Kenya Data Protection Act, 2019, and depending on your location, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated data.
• Object to or restrict certain processing, including direct marketing.
• Data portability — request your data in a portable format.
• Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya, if you believe your data has been mishandled.

To exercise any of these rights, contact us using the details in Section 12.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you signed in.
• Remember your preferences.
• Analyze traffic and usage patterns to improve the Service.

You can control cookies through your browser settings. Disabling cookies may affect certain features of the Service.

9. Children's Privacy

Kiambu Road is intended for users aged 18 and above only. We do not knowingly collect data from anyone under 18. If we become aware that a user is under 18, we will terminate the account and delete associated data.

10. Location Information

If you enable location services, we use your location to show you matches nearby and to improve match relevance. You can disable location access at any time through your device settings, though this may limit some features.

11. International Data Transfers

Our servers and service providers may be located outside Kenya. Where personal data is transferred internationally, we take steps to ensure it receives an adequate level of protection consistent with the Kenya Data Protection Act, 2019, such as using providers with appropriate safeguards.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:

Uju Platforms Email: KiambuRoad@uju.co.keWebsite: kiamburoad.uju.co.ke Nairobi, Kenya

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via the app, email, or a notice on our website. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.