Privacy Policy

Last updated: October 24, 2022

Introduction

Wecast Media ("we," "our," or "us") is committed to protecting your privacy and complying with the Data Protection Act, 2019 of Kenya. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our mobile application and related services.

Personal Data We Collect

We collect and process the following categories of personal data in accordance with Section 30 of the Data Protection Act:

Account Information

• Email address
• Password (encrypted)
• Full name
• Profile information (up to four profiles per account)
• Age verification for child profiles
• Parental control settings

Usage Data

• Viewing history and preferences
• Watch time data
• Streaming progress for "continue watching" functionality
• Device information and identifiers
• Access timestamps

Legal Basis for Processing

We process your personal data in accordance with Section 30 of the Data Protection Act on the following grounds:

• Your explicit consent for account creation and profile management
• Performance of our service contract with you
• Compliance with legal obligations
• Legitimate interests in providing and improving our services

Processing of Children's Data

In accordance with Section 33 of the Data Protection Act:

• We collect and process children's personal data only with parental/guardian consent
• Parents/guardians can create and manage child profiles with age-appropriate content restrictions
• We implement age verification mechanisms
• Special protections are in place for child profiles
• Parental controls are available to restrict access and content

Data Protection Principles

We adhere to the principles outlined in Section 25 of the Data Protection Act:

• Process data lawfully, fairly, and transparently
• Collect data for explicit and legitimate purposes
• Ensure data accuracy and keep it up to date
• Retain data only as long as necessary
• Implement appropriate security measures
• Process data in accordance with data subjects' rights

Your Rights

Under Sections 26-40 of the Data Protection Act, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Object to processing
• Data portability
• Withdraw consent
• Restrict processing
• Lodge complaints with the Data Protection Commissioner

Data Security

In compliance with Sections 41-43, we implement appropriate technical and organizational measures to protect your data:

• Secure password encryption
• Protected data storage
• Regular security updates
• Access controls for user profiles
• Data breach notification procedures
• Regular security audits

Data Retention

We retain your personal data only for as long as necessary to:

• Maintain your active account
• Provide our services
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

Cross-border Data Transfers

In accordance with Sections 48-50 of the Data Protection Act:

• We only transfer data outside Kenya with appropriate safeguards
• We ensure recipient countries have adequate data protection laws
• We obtain necessary consents for international transfers
• We implement required data protection measures for transfers

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of any material changes and obtain consent where required by law.

Complaints

You have the right to complain to a data protection authority about our collection and use of your personal information.

Consent

By using our app, you consent to this Privacy Policy and confirm you have read and understood your rights under the Data Protection Act.