🔒 Privacy Policy
How we collect, use, and protect your information

Effective Date: August 5, 2026

Autosoft Shujaa ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile applications and website (collectively, the "Service").

This policy complies with the Kenya Data Protection Act (DPA) 2019 and applicable international privacy standards.

1. Information We Collect

1.1 Information You Provide to Us

We may collect information you voluntarily provide when you:

  • Create an account (name, email address, phone number)
  • Contact us for support (name, email, message content)
  • Subscribe to newsletters or updates (email address)
  • Fill out forms on our website

1.2 Information Collected Automatically

When you use our Service, we may automatically collect:

  • Device Information: Device type, operating system version, unique device identifiers
  • Usage Data: App interactions, feature usage, crash logs, performance data
  • Log Data: IP address, access times, pages viewed, referring URLs

1.3 Information We Do NOT Collect

We do not collect:

  • Sensitive personal data (race, religion, political opinions, biometric data)
  • Precise real-time location data without explicit consent
  • Financial account credentials or payment card details (payments are processed by third-party providers)

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Respond to your inquiries and provide customer support
  • Send administrative notifications (updates, security alerts, policy changes)
  • Analyze usage patterns to improve app performance and user experience
  • Detect, prevent, and address technical issues or fraudulent activity
  • Comply with legal obligations under Kenyan and international law

We will never sell your personal data to third parties.

3. Legal Basis for Processing

Under Kenya's Data Protection Act 2019, we process your personal data on the following legal bases:

  • Consent: Where you have given clear consent for specific purposes
  • Contractual Necessity: To fulfill our obligations under our Terms of Service
  • Legitimate Interests: To improve our Service and protect our users
  • Legal Obligation: To comply with applicable laws and regulations

4. Data Sharing and Disclosure

We may share your information with:

  • Service Providers: Third-party vendors who help us operate our Service (hosting, analytics, crash reporting) — all bound by data processing agreements
  • Legal Authorities: When required by law, court order, or governmental regulation in Kenya
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified)

We require all third parties to respect the security of your personal data and treat it in accordance with the law.

5. Data Security

We implement appropriate technical and organizational security measures to protect your data:

  • Data encryption in transit (TLS/HTTPS) and at rest
  • Access controls and authentication mechanisms
  • Regular security assessments and monitoring
  • Staff training on data protection obligations

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal data only for as long as necessary to:

  • Provide you with the Service you requested
  • Comply with legal, accounting, or reporting obligations
  • Resolve disputes and enforce our agreements

When data is no longer needed, we securely delete or anonymize it.

7. Your Rights (Kenya DPA 2019)

Under Kenyan law, you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Correct any inaccurate or incomplete data
  • Erasure: Request deletion of your personal data (see our Data Deletion page)
  • Restriction: Limit how we process your data in certain circumstances
  • Objection: Object to processing based on legitimate interests
  • Portability: Receive your data in a structured, commonly used format

To exercise any of these rights, contact us at privacy@autosoftshujaa.com.

8. Children's Privacy

Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete it.

9. International Data Transfers

Your data may be stored and processed on servers located outside Kenya. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses or equivalent protections.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on this page
  • Updating the "Effective Date" at the top
  • Sending an in-app notification or email for significant changes

11. Contact Us

If you have questions about this Privacy Policy or our data practices:

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya if you believe your data rights have been violated.