Privacy Policy

FedhAI operates fedhai.com. We are the data controller for personal data processed to run the Service. This Policy explains what we collect, why, who we share it with, and your rights under the Kenya Data Protection Act, 2019. The Terms of Service say how the product works. Contact: hello@fedhai.com.

1. Data we collect

• Account. Name, email, password hash or Google sign-in, optional organisation and job title.
• Office seat. Office, level, join code use, role (owner, editor, member).
• Public record. Questions, replies, evidence links, and files you place on a budget or project page. These are shown to other users.
• Workspace use. Budgets, uploads, projects, and settings you store in a signed-in office or citizen seat.
• Payment. Plan, amount, status, and processor references. Card numbers are handled by Paddle, not stored by us. M-PESA STK, when used, is handled by Safaricom; we store the result needed to settle the seat.
• Technical. IP address, device, browser, approximate log times, and security events.

2. Why we use it

• to provide the published books, the public thread, and the workspace;
• to authenticate you and keep the Service secure;
• to activate offices, bill plans, and send receipts or service mail;
• to hide spam and cluster repeat questions so officers see a real queue;
• to meet law, a court order, or a regulator.

Legal bases include performance of a contract with you, our legitimate interests in a secure public record, consent where you choose optional fields, and legal obligation.

3. What is public

Participation on a published page is the product. Treat a question or office reply as public. Do not put a private identifier, health detail, or another person's data on a thread unless you have a lawful reason. Official budget figures we display are already public or filed by the owning office.

4. Who we share with

We share personal data only as needed to run the Service:

• hosting and database (currently Supabase / Lovable Cloud);
• card checkout (Paddle);
• mail (Resend), from addresses such as hello@ and notifications@;
• M-PESA STK (Safaricom Daraja) when that rail is used;
• the public, for content you chose to post on a public page;
• an office owner, for members and inbox of that office;
• law enforcement or a court when the law requires it.

We do not sell personal data.

5. Cookies and local storage

We use cookies and local storage for sign-in, theme, and similar session needs. These are required for the Service to work. We do not run third-party advertising cookies.

6. Retention

Account and billing records are kept while the seat is open and as long as tax or dispute rules require. Public threads may remain as the record after you close an account, with your profile detached where we can do so without breaking the page. Security logs are kept for a limited period.

7. Transfers

Some processors store data outside Kenya. Where we use them, we do so to provide the Service and on terms intended to protect the data to a standard comparable with Kenyan law.

8. Your rights

Subject to the Act, you may request access, correction, deletion, restriction, or objection, and you may complain to the Office of the Data Protection Commissioner. Write to hello@fedhai.com. We may refuse a request that would erase a lawful public record, break security, or that the Act does not require us to honour.

9. Children

The Service is for persons 18 and older. We do not knowingly open accounts for children.

10. Security

We use access control, encryption in transit, and role limits. No method is perfect. Tell us at hello@fedhai.com if you believe an account is compromised.

11. Changes

We may update this Policy. The date at the top will change. Material changes will be posted on this page. Continued use after that date is acceptance.