Last updated: 8 July 2026
Vukana (“we,” “us,” “our”) helps people across Kenya discover events, and lets organizers list them. This policy explains what information we collect, why, who we share it with, and the choices and rights you have over it. It applies to everyone who uses Vukana, whether you're browsing without an account, signed in as an attendee, or running events as an organizer.
We try to write this in plain language rather than dense legal boilerplate. If anything here is unclear, contact us — details are at the bottom of this page.
Account information. When you register, we collect your name, email address, and password (which we never see or store in plain text — it's hashed before it ever reaches our database). We automatically generate a unique username for your account, which you can change from your profile. If you sign in with Google, we receive your name, email, and profile photo from Google instead.
Organizer information. If you apply to organize events, we collect your name, email, phone number, organization name, and a description of the events you plan to run. If approved, your organizer profile (organization name, bio, logo, website, and social links) is visible publicly on your event listings.
Event content. Organizers upload event details, descriptions, and images, which are stored with our media provider (Cloudinary) and displayed publicly once an event is approved.
Contact and feedback. If you use our contact form, we collect your name, email, and message so we can respond to you.
Usage information. We keep track of which events you've favorited and any reviews you leave. For security, we log IP addresses on certain actions (like sign-in attempts and admin actions) to detect abuse and maintain an audit trail. We also use session cookies to keep you signed in — these are essential to the service and aren't used for advertising or cross-site tracking.
We do not sell your personal information, and we do not use it for advertising.
We use a small number of external service providers to run Vukana, each of whom only receives the information they need to do their job:
We don't share your information with any other third party except where required by law, to protect our rights, or to protect the safety of our users.
We keep your account information for as long as your account is active. If you'd like your account and associated personal data deleted, contact us and we'll process that request, subject to any legal or security-related record-keeping obligations (for example, audit logs tied to moderation decisions may be retained for accountability purposes even after an account is deleted).
Under Kenya's Data Protection Act, 2019, you have the right to:
To exercise any of these rights, contact us using the details below. We'll respond within a reasonable time, and in any case within the timeframes required by law.
We take reasonable technical and organizational measures to protect your information, including encrypted connections, hashed passwords, rate limiting, access controls restricting who can view or modify data, and audit logging of administrative actions. No system is perfectly secure, but we work to keep your information safe and will notify affected users in the event of a data breach as required by law.
Vukana is not directed at children, and we don't knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we'll take steps to delete it.
Some of our service providers process data outside Kenya. Where this happens, we rely on providers that maintain appropriate safeguards for personal data in line with applicable data protection law.
We may update this policy as Vukana evolves. If we make material changes, we'll update the “last updated” date above, and where appropriate, notify you directly.
Questions about this policy or your data? Reach us at brianratemom@gmail.com or +254 720 039 832.