Account access controls
Admin and dashboard areas use authenticated access paths. Sensitive operating tools are not linked from public navigation.
Privacy safeguards
This notice explains what we collect, why we use it, who may receive it, how long it is kept, and the choices available to you. Effective 30 July 2026.
Admin and dashboard areas use authenticated access paths. Sensitive operating tools are not linked from public navigation.
Client, practitioner, payment, booking, and onboarding records are separated by purpose so permissions can stay narrow as the platform grows.
Public profiles show only intended directory information. Exact addresses and private booking details are not exposed unless configured for a specific use case.
High-risk requests, booking changes, refunds, and sensitive support flows are designed to route through review rather than invisible automation.
Support tickets, general enquiries, and Diana chatbot messages are stored so the team can follow up, improve FAQs, and identify where people need clearer help.
Diana is designed for support triage and general guidance. Sensitive, urgent, billing, complaint, privacy, or account-specific matters are routed to a human.
Google Analytics helps us understand which public pages and journeys are useful. It may use cookies and collect device, browser, approximate location, and interaction data; it does not receive private wellness notes or payment details from Conscious Africa.
We regularly review Supabase row-level security, retention rules, analytics disclosure, payment webhooks, admin permissions, and user-facing terms for bookings, practitioner vetting, refunds, referrals, and community safety.
For privacy questions, email hello@consciousafrica.com.
Conscious Africa operates consciousafrica.com as a wellness discovery, community, matching, booking, and practitioner platform. For privacy questions or to exercise a privacy right, email hello@consciousafrica.com or write to Conscious Africa, Nairobi, Kenya.
Before public launch, the operating legal entity, registered address, and Office of the Data Protection Commissioner registration details must be inserted here where legally required.
Depending on how you use the platform, we may collect identity and contact details; account and profile information; search, wellness-interest, intake, matching, booking, support, consent, and community information; practitioner qualifications and business information; transaction references and payment status; messages, reviews, safety reports, and preferences; and device, browser, approximate location, cookie, and usage information.
Wellness intake and support information may reveal health or other sensitive personal data. Please provide only what is reasonably needed. Payment-card and mobile-money credentials are handled by payment providers; Conscious Africa should retain transaction references and status rather than full payment credentials.
We use information to create and secure accounts; provide search, matching, bookings, payments, customer support, practitioner onboarding, community and safety functions; communicate service updates; prevent fraud and abuse; improve reliability and accessibility; meet legal obligations; and establish, exercise, or defend legal claims.
Depending on the activity and applicable law, processing is based on performance of a requested service or contract, compliance with law, legitimate interests that do not override your rights, protection of vital interests, or your consent. Where consent is required—especially for direct marketing or sensitive information—you may withdraw it without affecting earlier lawful processing.
The wellness planner and support tools may use rules, matching signals, or an optional AI provider to produce general wellbeing suggestions. These outputs are not medical diagnosis or emergency care, and important health or safety decisions should not be made solely by automation.
Before enabling AI with real user information, Conscious Africa must confirm the provider, purpose, information sent, retention settings, safeguards for transfers, human-review path, and whether an impact assessment or additional consent is required.
We may share the minimum necessary information with a practitioner, host, venue, or business involved in a request or booking; infrastructure, database, authentication, analytics, email, support, calendar, and payment service providers; professional advisers; regulators or authorities when legally required; and a successor involved in a properly safeguarded business transaction.
Independent practitioners and hosts may be separate data controllers for information they receive. We do not sell personal information. We do not share private wellness notes with advertising platforms.
Some technology providers may process information outside Kenya. Before launch, Conscious Africa must record provider locations and transfer safeguards and use adequacy, appropriate contractual or organisational safeguards, necessity, or explicit consent as required by Kenyan data-protection law.
We keep information only for as long as needed for the stated purpose, legal and accounting obligations, safety, dispute handling, fraud prevention, and backup recovery. Access should be restricted while information is retained and it should be deleted or anonymised when no longer needed.
Before public launch, Conscious Africa must approve and publish a retention schedule covering accounts, wellness intake, bookings, payments, support, community content, provider verification, analytics, audit logs, and backups. Backup copies may remain until the applicable secure rotation period ends.
Subject to applicable law, you may ask to be informed about processing, access your information, object to or restrict processing, correct inaccurate information, request deletion, withdraw consent, request a portable copy where applicable, and raise a complaint. We may need to verify your identity and may retain information where the law requires it.
You may unsubscribe from marketing using the message link or by emailing us. Service, booking, security, and legal notices may still be sent when necessary. You may also complain to Kenya's Office of the Data Protection Commissioner.
We use role-based access, row-level database controls, encrypted transport, secret separation, audit records, rate limiting, backups, and operational review. No system is risk-free, so suspected incidents should be reported promptly to hello@consciousafrica.com.
Accounts and paid transactions are intended for adults unless a parent or legal guardian is properly involved. We do not knowingly invite children to submit private wellness information independently.
We may update this notice as services, providers, or legal requirements change. Material changes will be communicated appropriately and the effective date will be updated.