Privacy Policy

Introduction

Yorixa ("we," "our," or "us") is operated by Kithinji Brian, located in Kenya. We respect the privacy of our users and are committed to complying with the Data Protection Act, 2019 of Kenya. This Policy describes how we collect, use, disclose, secure, and retain your personal data when you use the Yorixa mobile application (the "App").

Please read this policy carefully. If you do not agree with the terms, please do not access or use the App.

About Yorixa

Yorixa is a social networking and AI-assisted conversations app. With your express consent, we use certain data to build a profile to match you with other users based on shared interests and hobbies. We enable user messaging and content sharing among connections, and AI-assisted features for writing, coding, advice, and other support.

Information We Collect

Personal Information You Provide

When you register or use Yorixa, we collect personal data including:

• First Name and Last Name
• Email Address
• Username
• Phone Number

AI Conversation Data

When you interact with our AI model, we may collect:

• Your chat messages with the AI
• Profile-building inputs (only if you opt-in) to understand your interests or preferences

Important: AI conversation content is not used for profile matching unless you explicitly consent.

Social Interaction Data

• Messages with other users
• Posts and content you share
• Information about users you connect with

Device Permissions & Other Data

• Storage: to handle media files, profile pictures, etc.
• Contacts: only with your permission, to find and connect with friends.
• Notifications: to send messages, app updates, connection requests.

Legal Basis & How We Use Your Information

Core App Functionality

• Account creation and management
• Messaging between users
• Posting and sharing content
• AI-assisted services: writing, coding, advice

Profile Matching (Opt-in Only)

• Analysing your selected AI conversation data (only after you provide explicit consent)
• Building a profile to match you with others having similar interests

Other Purposes

• Improving user experience
• Security, fraud prevention, detecting abuse

Rights Under Kenyan Law

Under the Data Protection Act, 2019 you have the following rights:

• Right to be informed: You have the right to know what personal data we collect, why, and how it will be used.
• Right of access: You may request a copy of your personal data that we hold.
• Right to correct (rectification): If your data is inaccurate or outdated, you may request correction.
• Right to erase (deletion): You may request deletion of your personal data if it is no longer required for the purpose, or if consent is withdrawn.
• Right to object: You may object to certain data processing, especially for direct marketing or non-core purposes.
• Right to restrict processing: Where allowed under law.
• Right to data portability: You can request your data in a structured, machine-readable format and transfer to another controller, where technically feasible.

Data Sharing & International Transfer

We do not share your personal data except as described here, and only when lawful to do so:

• Third-party service providers (e.g. analytics, hosting) under agreement to keep your data secure.
• When required by law or by the directive of a court, government agency, or regulator.

If we transfer your data outside Kenya, we will only do so if the receiving country has adequate data protection laws or if we have your explicit consent, or other safeguards are in place.

Data Retention

We will retain your personal data only as long as necessary to fulfil the purposes for which it was collected, unless required by law to retain it for longer.

Security & Breach Notification

We have implemented technical and organizational security measures to protect your data, including encryption, access controls, and secure storage.

In the event of a data breach that may cause risk or harm to you, we will notify the Office of the Data Protection Commissioner (ODPC) and the affected users without undue delay, in accordance with the law.

Children & Vulnerable Groups

Yorixa is not intended for children under 13. If we learn that we have collected personal data of a child under 13 without verified parental or guardian consent, we will delete that data.

Contact & Complaints

If you have questions or concerns about this policy or how we process your personal data, contact us:

Changes to This Policy

We may update this privacy policy from time to time. When we make changes, we will update the “Last updated” date and notify you (via the app or email) of material changes.