Yeta-App-Privacy-Policy

Privacy Policy for Yeta Shopping App

Last Updated: February 4, 2026

Effective Date: February 4, 2026

This Privacy Policy applies to the Yeta Shopping mobile application (hereinafter referred to as the “Application” or “App”) created and operated by Yeta (hereinafter referred to as the “Service Provider”, “we”, “us”, or “our”). This service is provided as a Free service and is intended for use “AS IS”.

This Privacy Policy is compliant with the Kenya Data Protection Act, 2019 and outlines how we collect, use, store, and protect your personal information.

1. Data Controller Information

Service Provider: Yeta
Email: yetashopping@gmail.com
Jurisdiction: Kenya

In accordance with the Kenya Data Protection Act, 2019, Yeta is the data controller responsible for the processing of your personal data.

2. Information Collection and Use

2.1 Automatically Collected Information

The Application automatically collects certain information when you download and use it. This information may include:

Device Information:
- Your device’s Internet Protocol address (IP address)
- Device model and manufacturer
- Operating system version
- Unique device identifiers
- Mobile network information
Usage Information:
- The pages of the Application that you visit
- The time and date of your visit
- The time spent on those pages
- The time spent on the Application
- Features you access and actions you take

2.2 Location Information

The Application collects your device’s location data to provide the following services:

Geolocation Services: We utilize location data to provide features such as:
- Personalized content and recommendations
- Location-based services (e.g., finding nearby stores)
- Delivery address suggestions
- Store locator functionality
Analytics and Improvements: Aggregated and anonymized location data helps us:
- Analyze user behavior and preferences
- Identify trends and patterns
- Improve the overall performance and functionality of the Application
- Enhance user experience
Third-Party Services: Periodically, we may transmit anonymized location data to external services that assist us in:
- Enhancing the Application
- Optimizing our offerings
- Providing location-based features

Note: Location data is only collected when you grant permission and is used solely for the purposes stated above. You can revoke location permissions at any time through your device settings.

2.3 Camera and Media Access

The Application requests camera permission for the following purposes:

Profile Photos: Taking photos for your user profile
Product Photos: Uploading photos of products for listings or reviews
QR Code Scanning: Scanning QR codes for payments or product information
Document Scanning: Scanning documents for verification purposes

Note: Camera access is only used when you explicitly choose to use camera features. We do not access your camera without your explicit action.

2.4 Storage Access

The Application requests storage permission to:

File Saving: Save files you create within the app (e.g., receipts, invoices)
Data Export: Export data (e.g., Excel sheets, order history) to your device
Image Upload: Access images from your device to upload to the Application

Note: We only access files you explicitly choose to save or upload. We do not access your entire storage without your permission.

2.5 Personally Identifiable Information

For a better experience, while using the Application, we may require you to provide us with certain personally identifiable information, including but not limited to:

Full name
Email address
Phone number
Physical address
Payment information (processed securely through third-party payment processors)
Profile information

The information that we request will be retained by us and used as described in this privacy policy.

2.6 Communication

The Service Provider may use the information you provided to contact you from time to time to provide you with:

Important information about your account or orders
Required notices and updates
Marketing promotions (with your consent, which you can withdraw at any time)
Customer support communications

3. Legal Basis for Processing (Kenya Data Protection Act, 2019)

Under the Kenya Data Protection Act, 2019, we process your personal data based on the following legal grounds:

Consent: You have given clear consent for us to process your personal data for specific purposes
Contract Performance: Processing is necessary for the performance of a contract (e.g., processing your orders)
Legal Obligation: Processing is necessary for compliance with a legal obligation
Legitimate Interests: Processing is necessary for our legitimate interests (e.g., improving our services, fraud prevention)

4. Third Party Access

Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.

4.2 Third-Party Service Providers

Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:

4.3 Disclosure of Information

The Service Provider may disclose User Provided and Automatically Collected Information:

As required by law: Such as to comply with a subpoena, court order, or similar legal process, including requests from Kenyan authorities
To protect rights and safety: When we believe in good faith that disclosure is necessary to:
- Protect our rights, property, or safety
- Protect your safety or the safety of others
- Investigate fraud or security issues
- Respond to a government request
With trusted service providers: Who work on our behalf, do not have an independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this privacy statement and the Kenya Data Protection Act, 2019

5. Data Security

The Service Provider is concerned about safeguarding the confidentiality of your information. We provide physical, electronic, and procedural safeguards to protect information we process and maintain, including:

Encryption: Data transmission is encrypted using industry-standard SSL/TLS protocols
Secure Storage: Personal data is stored securely using encryption and access controls
Access Controls: Only authorized personnel have access to personal data, and access is logged
Regular Security Audits: We conduct regular security assessments and updates
Data Breach Procedures: We have procedures in place to detect, report, and investigate data breaches in accordance with the Kenya Data Protection Act, 2019

6. Data Retention Policy

The Service Provider will retain User Provided data for as long as you use the Application and for a reasonable time thereafter, or as required by law. Specifically:

Active Accounts: Data is retained while your account is active
Inactive Accounts: Data may be retained for up to 7 years after account closure for legal and business purposes
Legal Requirements: Some data may be retained longer if required by Kenyan law or for legal proceedings

If you’d like us to delete User Provided Data that you have provided via the Application, please contact us at yetashopping@gmail.com and we will respond within 30 days as required by the Kenya Data Protection Act, 2019.

7. Your Rights Under Kenya Data Protection Act, 2019

As a data subject, you have the following rights:

Right to Access: You have the right to request access to your personal data
Right to Rectification: You have the right to request correction of inaccurate or incomplete data
Right to Erasure: You have the right to request deletion of your personal data (subject to legal obligations)
Right to Restrict Processing: You have the right to request restriction of processing of your data
Right to Data Portability: You have the right to receive your data in a structured, commonly used format
Right to Object: You have the right to object to processing of your personal data
Right to Withdraw Consent: You have the right to withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at yetashopping@gmail.com. We will respond to your request within 30 days as required by law.

8. Opt-Out Rights

You can stop all collection of information by the Application easily by:

Uninstalling the Application: You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network
Disabling Permissions: You can disable specific permissions (location, camera, storage) through your device settings
Account Deletion: You can request account deletion by contacting us at yetashopping@gmail.com

9. Children’s Privacy

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 18 (as per Kenyan law).

The Application does not address anyone under the age of 18. The Service Provider does not knowingly collect personally identifiable information from children under 18 years of age. In the case we discover that a child under 18 has provided personal information, we will immediately delete this from our servers.

If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact the Service Provider at yetashopping@gmail.com so that we will be able to take the necessary actions.

10. Data Transfers

Your information may be transferred to and maintained on computers located outside of Kenya. By using the Application, you consent to the transfer of your information to facilities located outside Kenya. We ensure that any such transfers comply with the Kenya Data Protection Act, 2019 and that appropriate safeguards are in place to protect your data.

11. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by:

Updating this page with the new Privacy Policy
Sending you an email notification (if you have provided an email address)
Displaying a notice in the Application

You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

This privacy policy is effective as of February 4, 2026

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us, in accordance with the Kenya Data Protection Act, 2019.

13. Contact Us

If you have any questions regarding privacy while using the Application, or have questions about our practices, or wish to exercise your rights under the Kenya Data Protection Act, 2019, please contact the Service Provider via email at:

Email: yetashopping@gmail.com

We will respond to your inquiry within 30 days as required by the Kenya Data Protection Act, 2019.

14. Complaints

If you believe that we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya:

Office of the Data Protection Commissioner
Website: https://www.odpc.go.ke
Email: complaints@odpc.go.ke

This privacy policy is compliant with the Kenya Data Protection Act, 2019 and has been prepared to ensure transparency and protection of your personal data.