1. Who we are
MyVote ("we", "us", "our") is a civic utility operated by
MyKura Technologies, registered in Kenya.
We are the data controller for the personal data described in this policy,
and we comply with the Data Protection Act, 2019 (Kenya).
Contact for data matters: privacy@myvote.co.ke
2. What we collect
We collect the following categories of data, and nothing more:
a. Voter tool usage
- Approximate location — only when you tap "Locate". Processed in memory to find the nearest polling station, then discarded. Not stored.
- Search queries — anonymous ward or station names you search for. Retained in aggregate for 30 days to improve results.
- Device & browser type — anonymous, for compatibility and performance.
b. Candidate & campaign accounts
- Account details — name, email, phone, ward, county.
- Content you upload — manifesto, photos, events, slogans.
- Donation metadata — donor name, amount, M-Pesa transaction code. We do not see or store your M-Pesa PIN or full ID number.
- QR scan analytics — anonymized count of scans per poster, per ward. No personal identifiers attached.
c. Emails to us
- If you email us, we keep your message and email address for up to 24 months.
3. What we do not collect
- Your national ID number or passport number.
- Your voter registration number or polling station assignment.
- Precise GPS history or movement patterns.
- Your political opinions, party affiliation, or voting intention.
- Biometric data.
4. Why we process it
Under Section 30 of the Data Protection Act, we process personal data because:
- You have consented (location, donations, emails).
- It is necessary to perform a contract (candidate accounts).
- We have a legitimate interest in providing a safe, functioning civic tool.
- We are required to by law (e.g., campaign finance reporting where applicable).
5. Who we share it with
We do not sell your data. Ever. We share limited data only with:
- Cloudflare — our hosting and edge infrastructure (global data centers, including EU and US).
- Safaricom / M-Pesa — to process donations on behalf of a campaign.
- Africa's Talking (or similar) — only if a campaign sends SMS to their own supporters.
- Law enforcement or regulators — only when legally compelled.
Cross-border transfers follow Section 48 of the Act. Where data leaves Kenya,
it goes to jurisdictions with comparable protections.
6. How long we keep it
- Location — 0 seconds. Discarded after computing the nearest station.
- Search queries — aggregated for 30 days.
- Candidate content — as long as the account is active, plus 12 months.
- Donation records — 7 years (compliance requirement).
- Emails — up to 24 months.
7. Your rights
Under the Data Protection Act, 2019, you have the right to:
- Be informed about how we use your data.
- Access a copy of the personal data we hold about you.
- Correct inaccurate data.
- Request deletion (the "right to be forgotten").
- Object to processing.
- Data portability.
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.
To exercise any right, email
privacy@myvote.co.ke.
We respond within 30 days.
8. Security
Data is encrypted in transit (TLS 1.3) and at rest. Access is strictly limited to
authorized personnel. We conduct periodic reviews of our infrastructure and
third-party vendors.
9. Cookies
We use only essential cookies required to run the service.
We do not use advertising trackers, and we do not embed third-party analytics
that identify individual users.
10. Children
Our services are not directed at persons under 18. We do not knowingly
collect data from minors. If you believe a minor has provided data to us,
contact us and we will delete it.
11. Changes
We may update this policy. Material changes will be announced on this page
with a new "Last updated" date.
12. Contact
Data Protection Officer
MyKura Technologies
Email: privacy@myvote.co.ke
Nairobi, Kenya