Privacy Policy

This policy explains how FamilyRoots (operated by iTach Technologies) processes personal data in line with the Kenya Data Protection Act, 2019.

Who controls the data

Each subscribing family decides what is recorded about its members and acts as controller for its family records. iTach Technologies processes those records on the family's behalf, and is controller for account, billing and platform-security data. (Confirm roles and registration with your legal adviser before launch.)

What we collect

• Account data: name, email, phone, password hash.
• Family records you or your relatives add: names, dates, relationships, stories, photos and documents.
• Payment records for subscriptions and family contributions.
• Security logs: sign-ins, IP addresses and audit trails.

How we protect it

Encryption in transit (TLS), encryption of sensitive fields, private file storage, strict separation between families, role-based permissions, two-step verification and audited, time-limited support access.

Your rights

You may request access, correction, restriction or deletion of your personal data, object to processing, or request a copy. Use the data protection request form.

Children

Records of minors are private by default and managed by parents or guardians.

Contact

Data protection enquiries: info@itach.net