Privacy Policy

Protecy (“we”, “us”) is an insurance information service for Kenya. We help you understand what insurance policies actually say, using real policy documents, and we can take your details so a broker can contact you when full broking services launch. Protecy is currently a pre-licence information service — we do not sell, arrange, or bind insurance.

This policy explains what personal data we collect, why, and the choices you have. It is written to comply with the Data Protection Act, 2019 (Kenya).

• Account details. When you sign in with Google we receive your name, email address, and profile picture. To complete your account we ask for a phone number.
• Conversations. The messages you send and the answers you receive, so your chat history works and so a human broker can pick up the conversation when needed.
• Lead details. If you ask to be contacted about cover, we store what you tell us (for example the type of cover you want) so a licensed broker can follow up.
• Technical data. Standard logs — IP address, device and browser type, timestamps — used for security and to keep the service running.

Answers are drafted by an AI assistant that reads licensed insurers’ policy documents and cites the exact clause it relied on. Before any of your messages reach the AI model, an automated scrubber replaces personal identifiers (names, phone numbers, email addresses, ID numbers, vehicle plates, addresses) with anonymous placeholders; the real values never leave our servers for model processing.

The AI provides information only. It does not decide prices, eligibility, or claims, and its answers are not financial or legal advice.

We never sell your personal data. We share it only with service providers we use to run Protecy:

• Cloud hosting and storage providers that hold our databases and documents.
• AI infrastructure used to generate answers (which receives scrubbed, de-identified text only) and quality-monitoring tooling that records de-identified traces of AI calls, some of which is operated outside Kenya.
• Google, when you choose to sign in with your Google account.

Pre-licence, we do not pass your details to insurers or third-party marketers.

We keep your data while your account is active. When you ask us to delete your data we remove it permanently from our systems, subject to any records we are legally required to keep. Routine deletions are first soft-deleted so mistakes can be undone, then purged.

Under the Data Protection Act, 2019 you may:

• ask what personal data we hold about you and get a copy;
• ask us to correct inaccurate data;
• ask us to delete your data;
• object to or restrict certain processing.

To exercise any of these, email privacy@protecy.co.ke. If you are unsatisfied with our response you may complain to the Office of the Data Protection Commissioner of Kenya.

We use only essential cookies: they keep you signed in. We do not use advertising or cross-site tracking cookies.

We will update this policy as the service evolves — including when Protecy becomes a licensed broker — and will show the date of the latest change at the top of this page.