UpCountry (“we,” “our,” or “us”) values your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our
mobile application, website, and related digital services (collectively, the “Platform”).
2. COMPLIANCE AND CERTIFICATION
UpCountry operates in compliance with the Data Protection Act, 2019 (Kenya), and is registered
with the Office of the Data Protection Commissioner (ODPC) as a certified data controller.
3. INFORMATION WE COLLECT
We collect the following types of data to provide and improve our services:
Personal Identification Data: Name, email address, phone number, gender, and profile photo.
Account Credentials: Login information and authentication tokens.
Device and Technical Data: Device type, operating system, IP address, app version, and log data.
Location Data: GPS coordinates to enable trip listings, route discovery, and trip tracking.
Communication Data: In-app messages and interactions between users.
Payment or Transaction Data: Where applicable, for service fees or promotional boosts.
4. HOW WE COLLECT INFORMATION
When you register or update your user profile.
When you post or book a trip through the Platform.
Automatically, via cookies, analytics, and integrated APIs (Firebase, Mapbox, Google Places, Vercel).
When you contact customer support or communicate with other users.
5. USE OF INFORMATION
We use collected information to:
Operate, maintain, and improve our Platform functionality.
Enable user-to-user matching (Drivers and Passengers).
Provide location-based services and trip recommendations.
Ensure account security and detect fraudulent activity.
Communicate updates, support messages, and service notifications.
Comply with applicable laws and regulatory requirements.
6. THIRD-PARTY SERVICES AND INTEGRATIONS
UpCountry uses trusted third-party services for hosting, analytics, and maps:
Firebase – Authentication, database, analytics, and notifications.
Mapbox and Google Places API – Maps, location, and routing data.
Vercel – Hosting and content delivery network.
These providers may process limited user data in accordance with their own privacy policies. UpCountry ensures
all integrations comply with global data standards such as GDPR and Kenya’s Data Protection Act.
7. DATA STORAGE AND RETENTION
Your personal data is securely stored on encrypted servers. We retain your data only as long as necessary for the
purposes outlined in this policy or as required by law.
Inactive accounts may be deleted after 24 months of inactivity.
Backups and logs are securely maintained for system integrity and audit purposes.
8. DATA SHARING AND DISCLOSURE
We do not sell or rent user data. However, we may share data:
With other users, when necessary for trip coordination and communication.
With legal authorities if required by law or in response to a lawful request.
With service providers or partners assisting in technical operations, security, or analytics.
9. USER RIGHTS
In accordance with the Data Protection Act (Kenya), users have the right to:
Access their personal data held by UpCountry.
Request correction of inaccurate or outdated data.
Request deletion of personal data where applicable.
Withdraw consent to data processing (which may limit Platform use).
We employ robust security practices to protect your data, including:
End-to-end encryption of sensitive data in transit and at rest.
Strict access controls for authorized personnel only.
Regular vulnerability testing and compliance audits.
11. DATA TRANSFER
Your data may be transferred to or processed on servers outside Kenya, depending on hosting infrastructure.
Such transfers are made only to jurisdictions with adequate data protection safeguards.
12. CHILDREN’S PRIVACY
The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.
13. LEGAL BASIS FOR PROCESSING
We process personal data under the following legal grounds:
Performance of a contract (to deliver Platform services).
Legitimate business interests (improving service experience).
User consent (for marketing, analytics, or optional data collection).
Compliance with legal or regulatory obligations.
14. UPDATES TO THIS POLICY
UpCountry may revise this Privacy Policy from time to time. Any updates will be reflected on this page with an updated effective date.
Continued use of the Platform indicates acceptance of any changes.
15. CONTACT INFORMATION
Questions regarding the Privacy Policy may be directed to: info@upcountry.app
