Privacy Policy
Last updated: 22 October 2026
Who we are
This website is run by Natembea Wangwe (“we”, “us”). We are responsible for the personal data you share here, as a data controller under Kenya’s Data Protection Act, 2019. You can reach us through the contact form on the About page.
What we collect
- Account details: your name, email address, password (stored encrypted, never readable by us) and, if you add them, your phone number and language. If you sign in with Google, we receive your name and email from Google.
- Purchase and tip details: the M-Pesa phone number you pay with, the amount, the M-Pesa confirmation code and, for printed books, your delivery name and address.
- What you send or post: comments, likes, reviews, and messages or invitations you send through our forms (with your name and email).
- Newsletter: your email address, if you subscribe.
- Visit statistics: only if you choose “Accept all”, we count which pages are visited, the website you came from, your device type (phone, tablet or computer) and your country. We do not store your IP address and do not set a cookie for this; visitors are counted with an anonymous code that changes every day and cannot identify you.
Why we use it
- To create and secure your account, including two-step verification.
- To process payments, deliver your e-book or printed book and send receipts.
- To send newsletters, only if you subscribe. Every email has a one-click unsubscribe link.
- To understand how the site is used and improve it.
- To meet legal and tax obligations.
Who we share it with
We never sell your data. We share only what is needed with services that help run the site:
- Supabase, which stores our database, accounts and files.
- Safaricom (M-Pesa), to process payments and tips.
- Resend, which delivers our newsletter emails.
- Our website host, which serves the website.
- Delivery partners, who receive your name, phone number and delivery point for printed books.
- Google, only if you choose to sign in with Google.
Some of these providers store data outside Kenya. We use them only with the safeguards the Data Protection Act, 2019 requires for transfers outside Kenya. Your comments and reviews are shown publicly with the name you choose once approved; your email is never shown.
How long we keep it
Account information is kept while your account is open. Purchase records are kept for as long as tax law requires. Everything else is deleted or anonymised once it is no longer needed, or when you delete your account.
Your rights
Under the Data Protection Act, 2019, you have the right to:
- Be told how your data is used.
- Access a copy of your data.
- Correct data that is wrong.
- Have your data deleted.
- Object to its use, including for marketing.
- Take your data elsewhere (data portability).
You can download your data yourself from My account (Privacy & security), and ask for your account to be deleted there; we confirm by email within 7 days. You can also make any request through the contact form on the About page. We respond promptly and always within the time the Data Protection (General) Regulations, 2021 allow.
Children
Members under 18 need permission from a parent or guardian to create an account or make a purchase.
Security
We protect your information with encrypted connections, encrypted passwords, optional two-step verification for members, required two-step verification for everyone on our team, and database rules that let each person see only what they need. If a data breach puts your information at risk, we will tell the Office of the Data Protection Commissioner within 72 hours and let you know without delay where the law requires.
Complaints
If you are unhappy with how we handle your data, please contact us first. You can also complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.