Privacy Policy

Introduction

Andy Speaks Africa (“we,” “us,” or “our”) is committed to protecting the privacy of the neurodiverse community. This policy explains how we collect, use, and safeguard your information on the Thee NeuroCircle platform in accordance with the Kenya Data Protection Act 2019.

What information do we collect?

We collect information to provide a personalized and secure experience:

  • Account Information: When you register, we collect your name and email address for account verification and security.

  • Sensitive Personal Data: You may voluntarily share health status, disability details, or family information in forum posts or your profile. Under Kenyan law, this is classified as “Sensitive Personal Data” and is handled with the highest level of security.

  • Technical Data: We record IP addresses, browser types, and server logs to prevent cyber fraud and maintain system integrity.

What do we use your information for?

Your data is processed based on your explicit consent for the following purposes:

  • Personalization: To tailor resource recommendations and “Daily Insights” to your specific needs.

  • Advocacy & Support: To facilitate connections between families and verified experts in the directory.

  • Communication: To send essential notifications regarding changes to the PWD Act 2025 or updates to your topics.

  • Research: To analyze aggregated, non-identifiable data to improve neurodiversity support services in Kenya.

How do we protect your information?

We implement industry-standard security measures, including:

  • Encryption: Sensitive data is encrypted during transit and at rest on our secured Contabo servers.

  • Access Control: Only authorized staff with a “need-to-know” basis can access sensitive user data.

  • Sensory Safety: Our “Sensory Safe” mode limits data-heavy animations and high-contrast visuals for user comfort.

What is our data retention policy?

  • Server Logs: Technical logs containing IP addresses are retained for a maximum of 90 days for security auditing.

  • Account Content: We retain your posts and profile data as long as your account is active. If you delete your account, your personal data will be purged or anonymized within 30 days.

Do we use cookies?

Yes. We use cookies to:

  • Keep you logged into your account safely.

  • Remember your “Sensory Safe” preferences.

  • Understand site traffic via aggregated, anonymous analytics.

Do we disclose any information to outside parties?

We do not sell or trade your personally identifiable information. We only share data with:

  • Trusted Partners: Third parties who help us operate the forum (e.g., hosting providers), provided they agree to strict confidentiality agreements.

  • Legal Necessity: When required by a valid court order under the Computer Misuse and Cybercrimes Act to protect safety or rights.

Your Rights under the Kenya Data Protection Act

As a user, you have the following rights:

  • Right to Access: Request a copy of all personal data we hold about you.

  • Right to Rectification: Request corrections to inaccurate or incomplete data.

  • Right to Erasure: Request the deletion of your account and personal data.

  • Right to Withdraw Consent: You may withdraw your consent for data processing at any time.

Children’s Privacy

Thee NeuroCircle is intended for individuals aged 13 and older. We do not knowingly collect data from children under 13 without verifiable parental consent.

Online Privacy Policy Only

This policy applies only to information collected through our online platform and not to information collected offline.

Your Consent

By using our site, you explicitly consent to this Privacy Policy and the processing of your sensitive personal data for the purposes stated above.

Changes to our Privacy Policy

If we decide to change our privacy policy, we will post those changes on this page and notify you via email for significant updates.

Last Updated: January 13, 2026