Skip to main content

Privacy Policy

Last updated: February 2026 · Laitigo Labs (LL)

Unakumbuka Digital Memorial Platform, operated by Laitigo Labs (LL) ("Unakumbuka", "we", "us"), is committed to protecting your personal data in accordance with the Kenya Data Protection Act, 2019 and the regulations thereunder. This policy explains how we collect, use, store, and protect your information.

1. Information We Collect

  • Account data: Name, email address, phone number, profile photo
  • Memorial content: Names, dates, photographs, biographies, and tributes of deceased persons
  • Payment information: M-Pesa phone numbers and transaction references (we do not store PINs)
  • Usage data: Pages visited, device type, browser, IP address, interaction events
  • Communications: Messages sent through our platform, support inquiries

2. How We Use Your Data

  • Creating, displaying, and sharing memorial pages
  • Processing fundraising donations via M-Pesa
  • Sending notifications (WhatsApp, email) about memorial updates
  • Connecting families with funeral service providers
  • Improving our platform and user experience
  • Complying with legal obligations

2b. AI-Assisted Features

We use artificial intelligence to help improve your experience on Unakumbuka:

  • Tribute writing assistance: AI helps draft and refine tributes. Your text is processed by our AI provider but is NOT stored by them.
  • Content moderation: AI helps detect inappropriate or harmful content to maintain a respectful environment.
  • Translation: AI-powered translation between English and Kiswahili for memorial content.
  • Image generation: Demo placeholder images are AI-generated and clearly labelled as such.

Important: Your memorial content is NOT used to train AI models. AI-generated suggestions are always optional — you control the final content that is published.

3. Legal Basis for Processing

We process your data based on: your consent, performance of our service contract, legitimate business interests, and compliance with Kenyan law.

4. Third-Party Services

  • Supabase: Database hosting and authentication (data stored securely)
  • Safaricom M-Pesa (Daraja API): Payment processing
  • Meta (WhatsApp Business API): Notification delivery
  • Vercel: Application hosting and deployment
  • Vercel AI Gateway: AI-assisted features (text suggestions, content moderation, translation)

Each provider has their own privacy policy. We only share data necessary for service delivery.

5. Data Retention

  • Memorials: Retained permanently unless the creator requests deletion
  • Financial records: Retained for 7 years per Kenyan tax and financial regulations
  • Account data: Retained while your account is active; deleted within 90 days of account closure
  • Usage logs: Retained for up to 12 months

6. Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

  • Access your personal data held by us
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal retention requirements)
  • Data portability — receive your data in a structured format
  • Object to processing of your data
  • Lodge a complaint with the Office of the Data Protection Commissioner

7. Cookies & Tracking

We use essential cookies for authentication and session management. We may use analytics cookies to understand platform usage. You can control cookies through your browser settings.

8. Children's Privacy

Users under 18 years of age require parental or guardian consent to create an account. We do not knowingly collect data from children under 13.

9. Data Security

We implement industry-standard security measures including encryption in transit (TLS), Row Level Security on our database, and secure authentication protocols.

10. Contact Us

For privacy-related inquiries, contact our Data Protection Officer at privacy@laitigosystems.com.