Kenya Mpya

Privacy Policy

Last updated: 3 November 2026

Kenya Mpya (kenyampya.co.ke) is a Kenyan platform where people share their stories, rate their leaders, explore counties and plan trips. This policy explains what information we collect, why we collect it, and the choices you have.

Questions? Email hello@kenyampya.co.ke.

What we collect
Google sign-in data
How we use it
Who we share with
What others see
Security
Your rights
Deleting your account
How long we keep it
Children
Changes

1. What we collect

When you create an account

Your name, email address and username.
Your county and, if you choose, your constituency.
If you sign in with Google: your name, email address and profile photo, as shared by Google. We never see or store your Google password.
If you sign up with email: a password, which is stored only in scrambled (hashed) form. We cannot read it.

What you post

Stories, reels, snaps, photos, comments, ratings and echoes.
Your location on posts, only if you switch on “Show my location on my posts” in Settings.
Places you save and trips you plan in Explore.

Payments

If you buy a Gold badge or donate to a charity through the site, payment is made with M-Pesa. We keep a record of the payment (amount, date and the phone number used), but never your M-Pesa PIN.

Security information

Sign-in times, and whether 2-step verification is on, so we can protect your account and show you your recent activity.

2. How we use Google sign-in data

When you choose “Continue with Google”, we receive only your name, email address and profile photo. We use them only to create and run your Kenya Mpya account: to sign you in, show your name and photo on your profile, and contact you about your account.

We do not use Google data for advertising, we do not sell it, and we do not share it with anyone except the service providers listed below who help us run the site. We do not ask for access to your Gmail, contacts, Drive or any other Google data.

Kenya Mpya’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google at any time in Settings → Account security, or remove Kenya Mpya’s access from your Google Account.

3. How we use your information

To run your account and show your posts.
To show you stories, reels and places that are relevant to you (for example, from your county or people you follow).
To send account emails: confirmations, password resets and security alerts. We do not send marketing emails without asking.
To keep the site safe: preventing spam, abuse and break-ins.
To build trip plans when you ask for one (see “AI trip planner” below).

AI trip planner

When you use Explore → Trip Planner, the counties, number of days, travel style and (if you allow it) your starting point are sent to Google’s Gemini AI to arrange the plan. Your name and email are not sent.

We never sell your personal information. We share it only with services that help us run Kenya Mpya:

Supabase: hosts our database, sign-in system and file storage.
Google: “Continue with Google” sign-in and the AI trip planner.
Safaricom (M-Pesa): to process Gold badge payments and donations.
Our web and email host: to serve the site and send account emails.
OpenStreetMap: map images in Explore (your device loads them directly).

We may also share information if Kenyan law requires it.

5. What others can see

Your name, username, photo, bio, county, posts, comments and ratings are public on Kenya Mpya. Your email address, password, phone number and payment details are never shown to other users.

6. Keeping your account safe

Passwords are stored hashed, and new passwords are checked against known data breaches.
You can turn on 2-step verification with an authenticator app.
We email you when your password, sign-in methods or 2-step verification change.
All connections to Kenya Mpya are encrypted (HTTPS).
Kenya Mpya will never ask for your password or a code by phone, SMS, WhatsApp or email.

7. Your choices and rights

Under Kenya’s Data Protection Act, 2019, you can:

See and update your information in Settings.
Ask for a copy of your data.
Ask us to correct or delete your data.
Object to how we use your data.
Turn off location on posts, echoes and snap tags in Settings.

To make a request, email hello@kenyampya.co.ke from the email on your account. We’ll reply within 30 days. You can also complain to the Office of the Data Protection Commissioner (odpc.go.ke).

8. Deleting your account

Email hello@kenyampya.co.ke with the subject “Delete my account” from the email address on your account. We’ll confirm it’s you, then delete your profile, posts, photos and saved places within 30 days. Records of payments may be kept for as long as Kenyan tax law requires.

9. How long we keep information

We keep your account information while your account is open. Reels disappear after 24 hours. When you delete your account, we delete your personal information, except where the law requires us to keep a record for longer.

10. Children

Kenya Mpya is not meant for children under 13, and we do not knowingly collect their information. If you believe a child has an account, email us and we’ll remove it.

11. Changes to this policy

If we change this policy, we’ll update the date at the top and, for important changes, let you know on the site.