My iNet privacy policy

My iNet is the customer app of iNet Africa, a trading name of [TO CONFIRM: exact registered name, e.g. Zeplin Investments (Kenya) Ltd], B3 Om Plaza, Lamu Road, Malindi, Kenya ("iNet", "we"). We decide how the personal data in the app is used, so we are its data controller under Kenya's Data Protection Act, 2019.

Questions about your data: [TO CONFIRM: privacy contact email] or [TO CONFIRM: phone].

This policy covers the My iNet app for Android and the web version at my.inet.africa.

What you give us

• Your email address, to send you sign-in codes and to find your iNet accounts.
• [only if the M-Pesa prompt is on] The phone number and amount you enter when you ask for an M-Pesa prompt.
• [only if support is on] The topic and messages of the support requests you send.

What the app records when you use it

• Your sign-ins: the date and time, your IP address, and the device name your phone or browser reports. This lets you see where you are signed in, and helps us protect your account.
• A record of what you did in the app, such as sign-ins, bill downloads and payment requests, with your IP address. You can see it under Me → Recent activity.
• Line check and speed test results (download and upload speed, ping, jitter and the test server used).
• [only if notifications are on] Your phone's notification token, only if you turn notifications on.

What we read from iNet's records to show you

• Your name, your iNet accounts and lines, your plan, bills, payments and statements. These come from the systems iNet uses to run your service.
• Your line's live speed, data usage, connection status and signal, from iNet's network systems.

What we do not collect: your location, contacts, photos or files, or your M-Pesa PIN (you enter it on M-Pesa's own screen, never in the app). The app has no advertising, and no analytics or tracking tools.

We do not sell your data, and we do not use it for advertising.

These companies handle data only to provide their service to us:

• Kazee, the platform where iNet keeps its customer, billing and support records. The app reads your account, lines, bills and payments from it[only if support is on: , and sends your support requests to it].
• [only if the M-Pesa prompt is on] Safaricom (M-Pesa). When you ask for an M-Pesa prompt, your phone number and the amount go to M-Pesa through iNet's payment service, so Safaricom can ask you to confirm the payment.
• [only if notifications are on] Google (Firebase Cloud Messaging). If you turn notifications on, your notification token and the text of each notification (for example "Your bill is ready") pass through Google's service to reach your phone. Google may process this outside Kenya.
• [TO CONFIRM: email provider, e.g. Kazee Mail], to send your sign-in codes.
• [TO CONFIRM: where the app's servers and database run].

We give data to authorities only when the law requires it.

• Sign-in codes and sign-in attempts: 2 days.
• Sessions: until you sign out, after 60 days without use, and never longer than 180 days.
• Your app data (recent activity, line checks, speed tests, payment requests, inbox, notification registrations): while you have a My iNet account. It is deleted at once when you delete your account.
• Notification tokens: removed when you sign out or delete your account, or when Google tells us the token no longer works.
• Backups: copies in backups are overwritten within [TO CONFIRM: days].
• iNet's own customer records (your account, bills, payments and support history) are not app data. iNet keeps them for as long as it needs them to run and bill your service and to meet legal and tax duties, whether or not you use the app.

The app keeps your sign-in in Android's secure storage, and a copy of what you last saw so it can open without a connection. Signing out or deleting your account removes both. The app switches off Android's cloud backup, so none of this is copied off your phone.

Under the Data Protection Act, 2019 you can ask to see your data, correct it, delete it, object to how we use it, or get a copy.

• Delete: Me → Delete my account, or see https://my.inet.africa/delete-account.
• [only if data export is on] Get a copy: Me → Download my data.
• Correct your name or email: contact iNet.
• Anything else: contact us at [TO CONFIRM: privacy contact email].

If you are unhappy with how we handle your data, you can complain to the Office of the Data Protection Commissioner (https://www.odpc.go.ke).

Deleting your My iNet account deletes your app data straight away. It does not end your internet service, and it does not delete iNet's billing records. To end your service, contact iNet.

My iNet is for iNet account holders and is not meant for anyone under 18.

• The app talks to iNet only over encrypted connections (https).
• Sign-in uses a one-time code sent to your email. Codes are stored only in a form that cannot be read back, and expire after 10 minutes.
• Each person's data is kept apart in our database, so one customer's data cannot be read through another customer's session.

No system is perfectly secure. If you notice anything wrong, tell us at [TO CONFIRM: email].

When this policy changes, we update it here and change the date at the top. For important changes, we also tell you in the app.

iNet Africa, B3 Om Plaza, Lamu Road, Malindi, Kenya · [TO CONFIRM: email] · [TO CONFIRM: phone]