Privacy Policy

Who we are

FweezyTech ("FweezyTech", "we") operates fweezytech.com — a platform publishing device reviews, comparisons, buying guides, and related tech content across the web and our social channels. This policy applies to our websites and the services we run, including the newsletter, "notify me" alerts, coming-soon lists, user accounts, and affiliate shopping links.

What we collect

We only collect what is needed to make the site work and to deliver the content and services you ask for. The personal data we may process includes:

• Email address — when you subscribe to the newsletter, request a "notify me" or coming-soon alert, create an account, or submit a press / sponsorship inquiry.
• Account details — if you create a user account: display name, email, and (where email/password sign-in is used) a securely hashed credential managed by our authentication provider.
• Inquiry details — name, organisation and message content when you use our press or sponsorship contact forms.
• Usage information — the pages you view, which affiliate / retailer links you click, and your search queries on this site. This is recorded at an aggregate level and is used only to understand what content is useful.
• Technical data — IP address (used transiently for rate-limiting and fraud prevention), browser type and device type, and basic referrer data.
• Preferences — theme preference and comparison-tray contents, stored locally in your browser.

Why we use it

• To send you what you asked for — review notifications, availability alerts, and the newsletter.
• To answer your inquiries — press, sponsorships, and other messages.
• To operate your account — keep you signed in, manage your profile, and secure the dashboard if you are an authorised administrator.
• To improve our content — understand which reviews, comparisons and guides are popular so we can publish more of what our readers value.
• To measure affiliate links — record that a reader left through a retailer link so partner programmes can attribute referrals.

Our legal basis

Under the Kenya Data Protection Act, 2019 (sections 25–26), we process your data on the following bases:

• Consent — for newsletter, notify-me and coming-soon alerts. You give this freely and can withdraw it at any time (see “Marketing & how to opt out”).
• Contract — where you open an account, or where we provide services to you or your organisation (e.g., sponsorships).
• Legal obligation — where Kenyan law requires us to keep records (for example, tax or company records).
• Legitimate interests — analytics, security, abuse prevention, and the operation of affiliate links, always balanced against your rights and interests.

Where we rely on legitimate interests, you may object to the processing (section 31 of the Act) — see “Your rights” below.

Cookies, local storage & analytics

We use a small number of first-party cookies and browser storage to operate the site:

• Authentication cookies — keep you signed in to your account.
• Theme & comparison tray — stored in your browser (localStorage); this never leaves your device.
• Analytics beacon — a privacy-respecting, cookie-light beacon that records which pages are viewed and which device links are clicked. It does not use cross-site trackers and does not attempt to re-identify you.

We do not use third-party advertising cookies, tracking pixels, or fingerprinting scripts. You can clear cookies and site data from your browser at any time without losing the ability to use the site.

Third parties we share data with

We do not sell your personal data. We share data only with processors that help us operate the platform, under contract, and only to the extent necessary:

• Supabase — database hosting, authentication, and storage for device images & file uploads.
• Upstash — Redis cache, vector search, analytics, and the QStash task queue.
• Cloudflare — edge network, image delivery and (optionally) object storage.
• Vercel — application hosting and deployment.
• Resend / SMTP — delivery of the emails you requested (newsletter, availability, account).
• Groq — the AI assistant and content-analysis features process the text you submit to them. See the AI section below.

Where these processors are located outside Kenya, we rely on appropriate safeguards for international data transfers as permitted by the Act (sections 48–49).

International data transfers

Some of the processors listed above are located outside Kenya. Where personal data is transferred across borders, we ensure the transfer complies with the Kenya Data Protection Act, 2019, including (where required) relying on appropriate safeguards or derogations recognised under the Act. We will give you further details on request.

How long we keep your data

• Emails (newsletter/alerts) — kept until you unsubscribe or ask us to delete them, or the feature they support ends.
• Accounts — kept while your account is active; deletion requests are honoured promptly.
• Inquiries — kept only as long as needed to respond and, where relevant, to maintain the relationship you asked for.
• Analytics — aggregated usage statistics are kept in a form that does not identify individuals.
• Technical/security logs — retained only as long as needed for security and abuse-prevention.

When we no longer need personal data for the purpose it was collected, we delete or anonymise it in line with the Act’s data-minimisation and storage-limitation principles.

How we protect your data

We apply organisational and technical measures appropriate to the risk, including encryption in transit (TLS), encryption of sensitive credentials at rest, role-based access controls (only named staff can reach personal data), rate limiting on public forms, and security monitoring of key infrastructure. We review these measures regularly.

Your rights under the Act

The Kenya Data Protection Act, 2019 gives you the right to:

• Access (s.27) — request a copy of the personal data we hold about you.
• Correction (s.28) — ask us to correct inaccurate or incomplete data.
• Deletion (s.29) — ask us to delete personal data we no longer need.
• Data portability (s.30) — ask us to provide your data in a structured, machine-readable format.
• Objection / restriction (s.31) — object to processing based on legitimate interests, or restrict how we process your data.
• Withdraw consent — stop marketing and notification emails at any time.

To exercise any of these rights, email privacy@fweezytech.com with your request and the email address you used. We will respond within the time limits set by the Act and may ask you to verify your identity first. We will not charge a fee for routine requests.

Data breach notification

If a personal data breach occurs that could result in a risk to your rights and freedoms, we will notify the Office of the Data Protection Commissioner (ODPC) and, where appropriate, affected individuals without undue delay, as required by the Act (s.24(2)). We maintain an internal incident-response process and review breaches to reduce the likelihood of recurrence.

Children’s data

Our content is intended for general audiences and we do not knowingly collect personal data from children. Our public forms ask for an email address from a person who can consent to receiving updates. If we become aware we have collected data from a child without the consent of a holder of parental responsibility, we will delete it promptly.

Marketing & how to opt out

We only send the emails you asked for: review notifications, availability alerts and the newsletter. Every marketing email includes an unsubscribe option, and you can also email privacy@fweezytech.com at any time to be removed from all lists. We do not sell or rent our email lists.

Changes to this policy

We review this policy regularly and will post any material changes on this page, updating the effective date at the top. Where a change would require new consent (for example, a new use of your data), we will ask for your consent before applying it.