Privacy Policy

Last updated 3 November 2026

Your privacy matters to us. This policy explains what What's Up Africa! (whatsup.africa) collects, why, who sees it, and the choices you have. We aim to follow the Kenya Data Protection Act, 2019 and, for visitors in Europe, the GDPR.

1. Who is responsible

What's Up Africa! is the data controller for the information described here. You can reach us at [email protected].

2. What we collect

• If you just browse: our server sees your IP address, browser type and the page you asked for, as every website does, and keeps standard technical logs for security. We also count visits with our own privacy-friendly analytics: no cookies, no IP address stored, and a visitor is a code that changes every day, so nobody can be followed from one day to the next. We record the page, the country page you read, where you came from, your device and browser type, and actions such as playing a radio station.
• If you create an account: your name, email address, country, the name you would like to be called, your password (stored only in scrambled form), the radio stations and publishers you favourite, and the dates you joined and last signed in.
• If you contact us: your message and email address.

3. Why we use it

• To run the site, keep you signed in, show your private feed and favourites, and send you a message to confirm your email address.
• To understand which pages and countries are used so we can improve the service.
• To keep the site secure and prevent abuse.
• To show advertising and measure it, only if you allow it in the cookie settings.

Our legal bases are: your consent (optional cookies), performing our agreement with you (your account), our legitimate interests (security and basic statistics) and legal obligations.

4. Cookies and similar technologies

You choose which optional cookies we use. You can change your mind at any time with "Cookie settings" at the bottom of every page.

• Essential (always on): a sign-in cookie if you have an account, and a small record of your cookie choice and display settings (such as text size). The site cannot work without them.
• Analytics (only if you accept): Google Tag Manager and Google Analytics, which help us understand how the site is used. Google may set cookies and process data under its own policy.
• Advertising (only if you accept): lets advertisers and Google measure ads and show more relevant ones.

If you decline, Google tags load in a restricted mode and do not store analytics or advertising cookies.

5. Who else handles your data

We do not sell your personal data. We share it only with providers that help us run the service, under their own privacy terms:

• our web hosting provider, which stores the site and database;
• Resend, which delivers our emails, such as the confirmation message;
• Google (Tag Manager, Analytics and YouTube). Playing a video on our site loads it from YouTube, which can collect data under Google's policy;
• content and data providers whose services your browser contacts directly while you use the site: FlagCDN for flag images, Open-Meteo for weather, and the publishers, radio stations and image sources you open.

6. International transfers

Some providers are outside your country. Where we transfer personal data, we rely on appropriate safeguards required by law.

7. How long we keep it

• Account details and favourites: until you ask us to delete your account.
• Analytics records: up to 13 months, then deleted.
• Security logs: a short period set by our host.
• Emails to us: as long as needed to deal with your request.

8. Your rights

You may ask to see, correct, export or delete your personal data, to object to or restrict how we use it, and to withdraw consent at any time. You can edit your details on your profile page. For anything else, email [email protected] and we will reply within 30 days. You also have the right to complain to the Office of the Data Protection Commissioner of Kenya or the authority in your own country.

9. Security

We use encryption in transit, scrambled passwords and access controls. No system is perfectly secure, so please use a strong, unique password.

10. Children

The site is not meant for children under 16 and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

11. Changes

We may update this policy. The date at the top shows when it last changed, and we will tell account holders about important changes.