Privacy Policy

Last Updated: 31 May 2026

This Privacy Policy explains how TaifaConnect collects, uses, shares, and protects your personal information when you use the platform to report a lost document or a found document. Please read it together with our Terms & Conditions.

1. Who We Are

TaifaConnect is a digital platform that helps reconnect lost identity documents with their rightful owners. For the purposes of the Data Protection Act, 2019, TaifaConnect acts as the data controller for the personal information processed through the platform.

TaifaConnect is an independent platform and is not affiliated with, endorsed by, or operated by the Government of Kenya, the National Registration Bureau, NTSA, or any other government agency unless expressly stated otherwise.

2. Information We Collect

We only collect the information needed to operate the lost-and-found service:

Category	Examples
Document details	Document type, the identity-document number, reference number, status (lost / found / claimed)
Personal details	Full name as shown on the document; owner name
Contact details	Phone number; finder's name and phone number (for found reports)
Location details	Where a document was lost or found (as provided by you)
Payment details	Where a fee applies: the M-PESA transaction reference/receipt and amount. We do not store your M-PESA PIN or full payment credentials.
Technical details	Limited technical information such as IP address and timestamps, used for security and abuse prevention

3. How and Why We Use Your Information

We process your personal information to:

Register and manage lost and found document reports.
Verify report details and the status of a document.
Notify and facilitate contact between a document owner and a finder.
Process applicable service fees and confirm payment.
Send notifications (for example, by SMS) relating to your report.
Protect the platform against fraud, abuse, and unauthorised access.
Comply with legal obligations.

4. Lawful Basis for Processing

Under the Data Protection Act, 2019, we rely on the following bases:

Consent — you provide your information and submit a report voluntarily.
Performance of a service — to deliver the lost-and-found service you requested.
Legitimate interest — to keep the platform secure and prevent misuse.
Legal obligation — where the law requires us to retain or disclose information.

5. How We Share Information

We do not sell your personal information. We share it only as necessary:

Between owner and finder — limited contact details may be shared to facilitate safe return of a document.
Service providers — trusted providers who help us operate the platform (for example, SMS delivery and mobile-money payment processing), who may only use the data to provide their service.
Legal and safety — where required by law, court order, or to investigate fraud or protect the rights and safety of users.

Publicly displayed verification and search results are partially masked to protect personal information.

6. Data Retention

We keep personal information only as long as necessary to operate the service, resolve a report, meet legal and record-keeping obligations, and protect against fraud. Inactive or resolved records may be archived or removed in line with our internal retention practices. Short-lived security data (such as rate-limit and login records) is purged automatically on a routine schedule.

7. How We Protect Your Information

Access to administrative functions is restricted and role-based.
Sensitive credentials are stored separately from the application code.
The platform applies security controls to detect and limit abuse and tampering.
Public results are masked to limit exposure of personal data.

However, no electronic system can be guaranteed to be completely secure, and we cannot guarantee absolute security of information transmitted to or stored on the platform.

8. Your Rights

Under the Data Protection Act, 2019, you have the right to:

Be informed about how your personal data is used.
Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data, where applicable and lawful.
Object to or request restriction of certain processing.
Withdraw consent, where processing is based on consent.

To exercise any of these rights, contact us using the details in Section 11. We may need to verify your identity before acting on a request.

9. Children

TaifaConnect is intended for use by adults. Where information relating to a minor is submitted (for example, a minor's identity document), it should be provided by a parent, guardian, or otherwise authorised adult.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date above shows when it was last changed. Continued use of TaifaConnect after changes are published constitutes acceptance of the revised policy.

11. Contact Us

For privacy questions or to exercise your data rights, contact:

TaifaConnect Support
Email: support@taifaconnect.com
Website: taifaconnect.com(Coming Soon!)

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya if you believe your data has been handled unlawfully.

Back to TaifaConnect