Privacy Policy

Sauti Yetu Assistive Venture operates Sightra, an assistive application for people who are blind or have low vision.

Contact: [CONFIGURE: privacy contact email]
Data protection contact: [CONFIGURE: Data Protection Officer contact, if appointed]
Postal address: [CONFIGURE: registered or operational postal address in Kenya]
Registration (if applicable): [CONFIGURE: business registration number, if applicable]

This policy explains how we process personal data when you use Sightra’s website and signed-in features. It is based on our engineering audit of the current application and may be updated when processing changes.

• Account data: email address and Supabase user identifier when you register or sign in. Passwords are handled by Supabase; we do not store passwords in our database.
• Session data: authentication tokens stored in a Django session cookie to keep you signed in.
• Preferences: theme and accessibility settings you choose (stored in browser local storage and, when signed in, synced to our database).
• Camera frames: when you use Live Vision, images are captured in your browser and sent to our server for analysis. They are processed in memory and are not saved to our database or disk by default.
• Environmental analysis: object labels and safety metadata from on-server detection, plus short text guidance generated using Google Gemini from that metadata and optional text prompts (raw camera images are not sent to Gemini in the current implementation).
• Location: if you use map features, your browser may request GPS coordinates or you may enter place names. Map pages may contact third-party geocoding and routing services from your browser; coordinates are not stored in our database by default.
• Voice: voice assistant features may use your device’s speech engine in the browser. Live Connect may use real-time audio via LiveKit when you join a call.
• Consent records: your privacy choices and timestamps for accountability.
• Technical logs: server logs may include errors and operational messages. We aim to avoid logging camera content; TTS generation should not log full scene descriptions.

For each activity, the appropriate lawful basis under the Kenya Data Protection Act must be confirmed with qualified counsel. Indicative mapping:

• Providing account access and preferences — contract / legitimate interests.
• Environmental analysis you request — contract and/or consent for camera processing, depending on legal advice.
• Security and fraud prevention — legitimate interests.
• Optional history, research, or analytics — consent if enabled (off by default).

• Supabase — authentication (may process account data outside Kenya depending on project region; review your Supabase data processing terms).
• Google (Gemini) — text generation from detection metadata and prompts.
• OpenStreetMap / Nominatim / OSRM (via browser on map pages) — map tiles, search, and routing.
• LiveKit — real-time audio/video for volunteer connect when used.
• Hosting provider — application hosting (e.g. cPanel server).

Some providers may process data outside Kenya. Where required, appropriate safeguards (contractual clauses, adequacy decisions, or ODPC-approved mechanisms) must be implemented before production reliance. This is an operational and legal action item.

• Account preferences and consent records — until you delete them or close your account, unless law requires longer retention.
• Session cookies — typically up to two weeks unless configured otherwise.
• Camera frames — transient (request processing only).
• Server TTS files — may be written temporarily under system temp directories; cleanup should be configured operationally.
• Supabase and Google — governed by their respective retention settings and terms.

We use HTTPS, session-based authentication, and environment-isolated secrets. No system is perfectly secure. You are responsible for keeping your password and device secure.

Subject to Kenyan law, you may have rights to access, rectify, erase, restrict, object, and port data, and to withdraw consent where processing is consent-based. Use Privacy rights & data requests in Settings or contact [CONFIGURE: privacy contact email]. You may lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

Sightra is not directed at children without guardian involvement. If you believe a child has provided personal data without appropriate authority, contact us to request deletion.