UliziaNow AI - Privacy Policy
Effective Date: February 1, 2026
Last Updated: January 23, 2026
1. Introduction
UliziaNow AI is committed to protecting your privacy in compliance with the Kenya Data
Protection Act No. 24 of 2019 (DPA) and the Constitution of Kenya (Article 31).
2. Information We Collect
Directly Provided: Mobile number, network operator (Safaricom), message content, and opt
in timestamps.
Automatically Collected: Metadata (timestamps), delivery status, session info, and usage
patterns.
Not Collected: Precise GPS coordinates, phone contacts, biometric data, or health records.
3. How We Use Information
Data is used to process queries, improve AI performance (including Swahili and local context),
provide support, and ensure regulatory compliance. Users can opt-out of model training by
sending "OPT-OUT TRAINING" to the shortcode.
4. Data Sharing and Disclosure
We do NOT sell personal data. Information is shared with trusted partners including SMS
gateways (e.g., Africa's Talking), cloud infrastructure (Hostpinnacle), and AI processors (OpenAI)
under strict data processing agreements.
5. Data Retention
Active Accounts: Duration of account plus 90 days.
Conversation History: 30 days for context continuity.
Inactive Accounts: Deletion after 18 months of inactivity.
Legal Records: Consent and financial records kept for 7 years.
6. Your Rights (Kenya DPA)
As a data subject, you have the right to access, rectification, erasure ("Right to be Forgotten"),
restriction of processing, data portability, and the right to object to processing. To delete your
account, SMS 0115713969.
7. Security Measures
We employ TLS/SSL encryption for data in transit and AES-256 for data at rest. We maintain
role-based access controls and conduct regular security audits. In case of a high-risk breach, we
notify the Data Commissioner within 72 hours.
8. SMS and AI Ethics
While we encrypt data within our systems, standard SMS is not end-to-end encrypted across
networks. Our AI development aligns with the Kenya National AI Strategy and UNESCO AI
Ethics Recommendations, focusing on fairness, transparency, and safety.
9. Contact and Complaints
Data Controller: UliziaNow AI (Registration: BN-79S6LWZM)
Email: info@uliazianow.co.ke / hello@ulizianow.co.ke
ODPC: Complaints can be lodged with the Office of the Data Protection Commissioner
(www.odpc.go.ke)