In short
- There are no accounts. We don't ask for your name, email address or phone number, and we don't sell or share personal data.
- Trips you save stay in your own browser. We never receive them.
- We set no cookies and run no advertising, tracking or analytics scripts.
- What you type into the planner or Ask Kenya is used only to answer you, then discarded. It is never written to our logs.
1. Who we are
KenyaPlus is a travel information and trip-planning website run from Nairobi, Kenya. For the personal data described here, KenyaPlus is the data controller under the Data Protection Act, 2019. To contact us about privacy, use the contact page or email support@kenyaplus.online.
2. What we handle, why, and on what basis
| Data | Why | Lawful basis (s. 30) | Kept for |
|---|---|---|---|
| Your network (IP) address and browser details, as every website receives them | To deliver pages, keep the site secure, and stop overuse (for example, more than 20 questions a minute) | Legitimate interests in running a secure, working website | Usage counters are kept in memory for minutes and never saved. Our host's server logs are kept for a limited period under its settings. |
| Your trip choices when you ask for a suggested plan (start point, length, travellers, interests, pace, transport, and the start date and budget if you give them) | To build the plan you asked for | Your request, so that we can provide the service you asked for | Not stored — used for that request only |
| Your question in Ask Kenya | To find an answer | Your request | Not stored, and never written to logs |
| Error reports and timings (the kind of error, the page address without anything after “?”, and how long a request took) | To find and fix faults | Legitimate interests in a reliable website | In our logs and in Sentry for a limited period under their settings; they contain nothing you typed |
We do not collect sensitive personal data (such as health, ethnicity or religion), and we don't make automated decisions about you that have legal or similar effects. Trip suggestions are suggestions only.
3. What stays in your browser
The planner's draft and the trips you save on My trips (including packing-list items) are kept in your browser's local storage on your device. We can't see, change or recover them. You control them: delete a trip on My trips, clear your browser data, or use Export all to keep a copy. A share link carries the trip after the “#” in the address; browsers don't send that part to servers, so we never receive shared trips, but anyone you give the link to can see that trip.
4. Who processes data for us
These service providers process data on our behalf, only to provide their service to us:
- Railway (Railway Corporation, United States) hosts the website. Our server runs outside Kenya, in Europe West (Amsterdam, Netherlands). It receives every request, including your network address.
- Sentry (Functional Software, Inc., United States) receives error reports, stored in its European Union region. Reports are built on our server and contain no request content.
- Anthropic (Anthropic PBC, United States) provides the AI model. For a suggested plan we send your trip choices and our list of destinations; for Ask Kenya, your question and the KenyaPlus passages that may answer it. We never send names, contact details or saved trips.
We don't sell personal data, and we share it with no one else unless the law requires us to.
5. Transfers outside Kenya
Because our providers' servers are outside Kenya, the data in section 4 is processed abroad. We choose providers that protect data with security measures, and we send only what each service needs, as sections 48 to 50 of the Data Protection Act require.
6. Security
The site is served only over encrypted connections (HTTPS) with strict security headers. Secret keys stay on the server. We send the minimum data to each provider and keep almost nothing. If a breach ever put your data at real risk, we would notify the Data Commissioner within 72 hours, as section 43 requires, and tell affected people where we can identify them.
7. Your rights
Under the Data Protection Act, 2019 you have the right to:
- be told how your personal data is used (this notice);
- access personal data we hold about you;
- object to all or part of the processing;
- have false or misleading data corrected, and data we no longer need deleted;
- receive data you gave us in a machine-readable form (data portability).
Because we hold almost nothing that identifies you, there is often nothing to give or delete — but ask us and we will check and reply. You can also complain to the Office of the Data Protection Commissioner.
8. Children
KenyaPlus is meant for adults planning travel. We don't knowingly collect personal data from children; children should use the site with a parent or guardian.
9. Changes to this notice
If we add anything that collects more data — such as accounts, a newsletter or new analytics — we will update this notice first and change the date at the top. See also our terms of use.