Effective Date: 17 September 2026 | Version 1.0
Your Privacy Matters
This Privacy Policy explains how Afrinsure collects, uses, and protects your personal information. We are committed to handling your data responsibly and in compliance with applicable data protection laws, including the Kenya Data Protection Act, 2019.
We collect the following categories of information: (a) Account data — name, email address, phone number, and authentication credentials; (b) KYC data — government-issued identification, address verification, date of birth, and supporting documentation required for insurance applications; (c) Insurance information — quotes, applications, policy details, and claims information; (d) AI conversations — interactions with our AI advisor for the purpose of providing assistance; (e) Documents — uploaded identification, policy documents, and claim-related files; (f) Usage data — information about how you interact with the Platform, including device information and analytics.
We use your information to: (a) facilitate insurance discovery, application, and distribution; (b) process KYC verification as required by our licensed partners and regulatory authorities; (c) communicate with you about quotes, applications, policies, and claims; (d) provide AI-assisted support and navigation; (e) comply with legal and regulatory obligations; (f) improve our services and Platform functionality. We do not sell your personal information to third parties.
To facilitate insurance services, we share your information with: (a) Licensed insurance brokers and intermediaries who facilitate your insurance applications; (b) Licensed insurers who underwrite and issue policies; (c) Lami Technologies, our infrastructure provider that powers insurance product integration; (d) Payment processors for premium payments; (e) Regulatory authorities where required by law. Each partner is authorised to access only the information necessary for their specific role in facilitating your insurance services.
Conversations with our AI advisor are stored to provide you with continuous assistance and to improve our services. We do not use your private conversations for AI training without an appropriate legal basis. You may request deletion of your conversation history where legally and technically appropriate. Administrative access to conversations is restricted and logged.
We implement appropriate technical and organisational measures to protect your personal information, including encryption in transit and at rest where supported, access controls, and regular security assessments. Sensitive credentials such as API keys and partner secrets are stored securely using backend secret management and are never exposed in frontend code, URLs, or client-side storage. KYC documents are stored with access restrictions and audit logging.
We retain your personal information for as long as your account is active and for a reasonable period thereafter as required by legal, regulatory, or insurance retention requirements. KYC documentation, policy records, and claims information may be subject to mandatory retention periods under applicable insurance regulations. Audit logs are retained in accordance with our security and compliance policies.
Subject to applicable law and regulatory requirements, you have the right to: (a) access the personal information we hold about you; (b) request correction of inaccurate information; (c) request deletion of your personal information where legally permissible; (d) export your data; (e) withdraw consent for specific data processing activities; (f) lodge a complaint with the relevant data protection authority. To exercise these rights, please contact us through the Platform's support channels.
We use cookies and similar technologies to operate the Platform, remember your preferences, and analyse usage patterns. You can control cookies through your browser settings. We use analytics tools to understand how the Platform is used and to improve our services. We do not use analytics to identify individual users.
Your information may be transferred to and processed in countries other than your country of residence, including to our infrastructure providers and insurance partners. Where data is transferred across borders, we take steps to ensure appropriate safeguards are in place in accordance with applicable data protection laws. Some jurisdictions may require data residency — please refer to our Country Configuration for jurisdiction-specific requirements.
The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or via email. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
For privacy enquiries or to exercise your data rights, please contact us through the Platform's support channels. For complaints regarding our handling of your personal information, you may also contact the relevant data protection authority in your jurisdiction.
© 2026 Nettulztech Corp. | Afrinsure — Digital Insurance Distribution Platform
This Privacy Policy is subject to review by qualified legal counsel before production launch.
Hi! I'm Philip 👋
How can I help?