Privacy Policy

Uchaguzi360 is a civic accountability platform that helps citizens report public service issues, monitor responses, and view community accountability information. This Privacy Policy applies when you use the Uchaguzi360 website and citizen-facing services.

It is an operational notice describing the platform's current handling of information. It should be read together with our Terms of Service.

Depending on how you use the platform, we may collect:

• Account and profile information, including your name, email address, telephone number, and ward where you provide them.
• Issue report information, including a description, category, optional location details, optional photographs, and the ward or area connected to the report.
• Civic engagement activity, including issue follows, comments, upvotes, resolution ratings, and notification preferences.
• Information needed to operate and protect the service, including authentication records, moderation activity, and technical usage records.

We use information to:

• Accept, classify, review, publish, and track civic issue reports.
• Display public accountability information and provide issue updates to citizens who choose to follow or receive notifications.
• Moderate submissions, prevent misuse, maintain service security, and investigate abuse or fraudulent reporting.
• Improve issue discovery, including identifying potentially similar reports and assisting with issue enrichment where enabled.

Reports submitted for public accountability are subject to review and publication controls. Public issue pages may display approved report text, status, general area information, and approved photographs. Exact location details and photographs are published only according to the moderation and publication settings applied to the report.

If you submit an issue anonymously, your identity is hidden from public and leader-facing displays. Authorised Uchaguzi360 administrators may still access identity information when necessary for moderation, security, abuse prevention, or legal compliance.

We rely on service providers to operate the platform. These may include Supabase for authentication, database and storage services; Render and Vercel for hosting and delivery; an SMS provider where notifications are configured and you opt in; and an AI service provider where issue text enrichment or similarity features are enabled.

AI-assisted processing can help organise issue descriptions and find similar reports. It does not replace moderation decisions or make official government determinations.

We retain information for as long as reasonably necessary to operate the civic record, provide requested features, maintain security, resolve disputes, and meet applicable obligations. A request to delete personal information may be subject to records that must be kept for platform integrity, public accountability, security, or legal reasons.

We use administrative and technical controls intended to protect information. No online system can guarantee absolute security, so users should avoid submitting unnecessary sensitive personal information in public issue descriptions or photographs.

Subject to applicable Kenyan data protection requirements, you may ask us to:

• Confirm whether we process your personal information.
• Provide access to, or correct, information about you.
• Delete personal information where deletion is applicable and does not compromise required accountability or security records.
• Withdraw optional SMS notification preferences.
• Raise a complaint or question about our handling of data.

We may update this Privacy Policy as the service, its providers, or applicable requirements change. When we publish material changes, we will update the effective date displayed at the top of this page.