Who is responsible. AES Nairobi is the member app of Anjuman-e-Saifee, Nairobi (the jamaat), which is responsible for the personal data in it. TwinFusion builds and runs the app for the jamaat. Questions and requests: murtazadoc786@gmail.com.
What the app holds, and why
Your jamaat record
The app shows you, and your household, the record the jamaat already keeps: ITS number, name, household, sector, gender, age as recorded and the contact details on file. You can ask for corrections from the app; the jamaat office reviews them.
Signing in
You sign in with your ITS number and a one-time code sent by SMS and email to the number and address on your record. We keep a record of your sessions and the phones you are signed in on, so you can see and end them from the app.
Photos
A portrait you send — or the head of your household sends for someone in it, or a jamaat photo-station volunteer takes with your agreement (or, for anyone under 18, with a parent or guardian present) — is reviewed by the jamaat office and, once approved, is used on your jamaat record and in the app. Location and other hidden data are removed from photos before they are stored.
Facial recognition (optional, adults only)
Only if you are 18 or over and switch it on yourself, a face signature is made from your approved photo so that the jamaat can mark your attendance at miqaats. Camera images taken at the door are compared and not stored. You can withdraw this at any time; the signature is then deleted. No one can switch it on for someone else, and it is never used for anyone under 18.
Miqaat RSVPs and attendance
Your household's RSVPs, and whether you were marked present at a miqaat (by ITS number, ITS card or face), so the jamaat can plan and know who attended.
Messages
Messages between members, and between members and businesses, stay inside the app. Phone numbers and emails are not shared through messages. The jamaat office reads a message only if someone reports it.
Business directory
What a business owner chooses to publish about their business (including, if they wish, its contact details, photos, hours and map location). Businesses you save are visible only to you. The app uses your location only when you, as an owner, choose to pin your business on the map; it does not track you.
Your phone and how the app is used
Phone model, system and app version, notification settings and error reports, to keep the app working and send you notices. For adult members only, which screens are used — you can switch this off under Me → Privacy & visibility. Nothing of this kind is collected for anyone under 18.
Zabihat payments
Card and mobile-money payments are made on Paystack's own secure page. The app does not see or store card or wallet details.
Never collected by the app: passport numbers, dates of birth or any medical information.
Who else handles it
We do not sell personal data or use it for advertising. Services that handle data on our behalf: secure cloud servers that host the app; Celcom Africa (sign-in SMS); Mailgun (sign-in email); Paystack (payments); Apple and Google (app delivery and notifications). Data is shared with no one else unless the law requires it.
How long it is kept
- Sessions end after 90 days without use, and after a year at most.
- Photos stay while they are on your jamaat record; replaced and withdrawn photos are deleted.
- Face signatures are deleted when you withdraw consent or your photo is replaced.
- Your messages, notices, usage history and phone links are deleted when you use Delete my app data.
Your rights
Under Kenya's Data Protection Act, 2019 you may see the data held about you, have it corrected, have app data deleted, and withdraw any consent. In the app: Me → Photo & corrections for corrections, and Me → Privacy & visibility → Delete my app data to delete what the app holds (your jamaat record itself is kept by the jamaat office). You can also email murtazadoc786@gmail.com, and complain to the Office of the Data Protection Commissioner (odpc.go.ke).
Children
Records of members under 18 are part of their household's record and are managed by the head of the household. There is no facial recognition and no usage analytics for anyone under 18.
Security
All traffic is encrypted. Access is limited to the people who need it in the jamaat office, and administrative actions are logged.
Changes
If this policy changes, the new version is published here with its date, and important changes are announced in the app.