Data Safety & Compliance

Your data, your rights. Learn how myKatiba protects your information in full compliance with Kenya's Data Protection Act, 2019.

myKatiba is built from the ground up with data protection at its core. We comply with Kenya's Data Protection Act, 2019 (DPA), which establishes a comprehensive framework for the protection of personal data, upholds the right to privacy under Article 31 of the Constitution of Kenya, and aligns with international data protection standards. Our practices are guided by the principles established by the Office of the Data Protection Commissioner (ODPC).

Principles

Our Data Protection Principles

Guided by the principles of data protection under Section 25 of the DPA 2019.

Principle 01

Lawfulness, Fairness & Transparency

We process your data lawfully, fairly, and in a transparent manner. You always know what data we collect and why.

Principle 02

Purpose Limitation

Data is collected for specified, explicit, and legitimate purposes — civic education — and never processed for incompatible purposes.

Principle 03

Data Minimisation

We collect only the minimum personal data necessary to deliver our services. If we don’t need it, we don’t collect it.

Principle 04

Accuracy

We take reasonable steps to ensure personal data is accurate, complete, and kept up to date at all times.

Principle 05

Storage Limitation

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected.

Principle 06

Integrity & Confidentiality

Appropriate technical and organisational measures protect your data against unauthorised access, loss, or damage.

Your Rights

Your Rights as a Data Subject

Under Part IV of the DPA 2019, you have the following rights regarding your personal data.

Right to be Informed

You have the right to be informed about the collection and use of your personal data, including the purpose, retention period, and who it is shared with.

Right of Access

You may request confirmation as to whether your personal data is being processed and, if so, access to that data and related information.

Right to Rectification

You have the right to have inaccurate personal data corrected and incomplete data completed without undue delay.

Right to Erasure

Also known as the "right to be forgotten" — you can request deletion of your personal data when it is no longer necessary for the purpose it was collected.

Right to Data Portability

You can receive your personal data in a structured, commonly used, and machine-readable format, and transfer it to another data controller.

Right to Object

You have the right to object to the processing of your personal data on grounds relating to your particular situation, including direct marketing.

Data Handling

How We Handle Your Data

A transparent breakdown of the data we collect, how we use it, and how long we keep it.

Stored Locally on Device

Data that never leaves your phone:

Reading progress & bookmarks
Theme and language preferences
Quiz scores & learning streaks
Notification settings

Anonymous Analytics

Aggregated, non-identifiable data used to improve the app:

Feature usage patterns
App performance metrics
Crash reports (device model + OS only)
Session duration statistics

Processed with Consent

Data processed only when you explicitly opt in:

Contact form submissions (name, email)
Push notification tokens
AI clause text sent to Gemini (no PII)
Feedback and bug reports

Data Deletion

Manage Your Data

Exercise your right to erasure under Section 40 of the DPA 2019. Choose selective or full account deletion.

Choose the scope of your deletion request. Selective removes specific categories while keeping your account active. Full deletion is permanent and irreversible — as provided under Section 40 of the DPA 2019.

Selective Data Deletion

Keep your myKatiba account active but remove specific data tied to your profile.

Data categories you can request to delete:

How to Request Selective Deletion

1
Send an email to support@mykatiba.co.ke with the subject line "Selective Data Deletion Request".
2
Specify the data categories you want removed from the list above.
3
Include your account details — the email or username associated with your myKatiba account.
4
Receive confirmation — we verify your identity and confirm removal within 3 business days. Your account remains active.

After selective deletion, you can continue using myKatiba normally. Deleted data cannot be recovered, but new data will be generated as you use the app.