Privacy Policy

1. Information We Collect

We collect information you provide directly:

• Account information: name, email, phone number, and profile photo
• Item reports: descriptions, photos, locations, and identifying details of lost or found items
• Communications: messages sent through the platform regarding claims or inquiries
• Verification data: proof of ownership documents submitted to support claims

We also automatically collect technical information such as IP address, browser type, device info, and usage data via cookies.

2. How We Use Your Information

• Operate, maintain, and improve the platform
• Facilitate matching lost and found items
• Verify user identities and ownership claims
• Send notifications about matches, claims, and platform updates
• Prevent fraud, abuse, and policy violations
• Comply with legal obligations

3. Information Sharing

We do not sell your personal information. We may share limited data with other users to facilitate item recovery, with service providers who help operate the platform, or when required by law.

4. Data Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest. However, no electronic storage method is 100% secure.

5. Data Retention

We retain your data for as long as your account is active. When you delete your account, your data is deleted within 30 days unless retention is legally required.

6. Your Rights

You may access, correct, or delete your personal data. To exercise these rights, contact privacy@secudox.com.

7. Third-Party Services

We use Google OAuth for authentication and Supabase for database infrastructure. Their respective privacy policies apply to data they process on our behalf.

8. Child Safety and CSAE Data Handling

Secudox is committed to combating child sexual abuse and exploitation (CSAE). We take the following approach to data related to child safety:

• Reporting data: Information submitted through CSAE reports is reviewed by trained admin staff and may be shared with law enforcement agencies without prior notice to the reporting user.
• Retention: CSAE-related reports and associated evidence are retained for the period required by applicable law, even after account deletion.
• Content removal: Any content determined to constitute CSAM will be removed immediately and reported to the relevant authorities, including the National Center for Missing & Exploited Children (NCMEC) and the National Police Service (Kenya).
• Child data: For missing persons cases involving children (under 18), only information necessary for identification and recovery is published. Contact details for child cases are restricted to verified law enforcement and admin personnel.

Our designated Child Safety Point of Contact can be reached at csae@secudox.com.

9. Contact

For privacy inquiries: privacy@secudox.com. Secudox Management Systems, Nairobi, Kenya.