Privacy
Last updated: 2026-09-02
The short version
This website collects nothing about you. It sets no cookies, runs no analytics, has no tracking pixels, no embedded video, no social widgets and no forms. There is no account to create and nothing to consent to. That is why you were not shown a cookie banner — there is nothing a banner would truthfully be asking about.
Three things are still worth telling you plainly: our web host records ordinary server logs, this page loads its typefaces from Google, and if you change the theme or the language we remember that choice on your own device. All three are explained below.
Who we are
Kivuko Labs is a product studio based in Nairobi, Kenya. We are the data controller for the personal data described in this notice.
Questions, or to exercise any of the rights below: privacy@kivukolabs.co.ke. For anything else: hello@kivukolabs.co.ke.
What this site does not do
- No cookies of any kind, first-party or third-party.
- No analytics, no tag manager, no heatmaps, no session recording.
- No advertising, no remarketing, no data brokers, no profiling.
- No forms — the page cannot submit data anywhere, and is prevented from doing so at the browser level by our content security policy.
- We do not sell, rent or share personal data. We never have.
The one thing we store on your device
If you switch between the light and dark theme, or choose a language, your browser keeps that choice in localStorage under the key kv-theme or kv-lang. It holds a single word — light, dark, or a two-letter language code.
It never leaves your device. It is not a cookie, it is not sent to our server, we cannot read it, and it identifies nothing about you. Clearing your browser data removes it and the site simply follows your system setting again. We mention it because “this site stores nothing” would otherwise be untrue, and we would rather be exact than tidy.
What we do receive
If you email us. We receive your email address, your name if you give it, and whatever you choose to write. We use it to reply to you and, where it becomes a working relationship, to carry out that work. The lawful basis is our legitimate interest in responding to people who contact us, and performance of a contract where one follows.
Server logs. Our host records standard technical logs for every request — IP address, timestamp, the page requested, and browser user-agent. These exist to serve the page and to detect abuse. We do not use them to build any profile of you, and we do not combine them with anything else.
Others who process data for this site
- Netlify hosts this website and handles the server logs described above. Its servers and content-delivery network operate outside Kenya.
- Zoho Mail carries email sent to our kivukolabs.co.ke addresses.
- Google Fonts. This page requests its typefaces from fonts.googleapis.com and fonts.gstatic.com. Making that request discloses your IP address to Google. It sets no cookie and we receive nothing back, but your IP does reach a third party, and we would rather say so than let “we collect nothing” quietly cover it.
Because these providers operate outside Kenya, serving this page involves a transfer of personal data abroad. We rely on the safeguards in those providers’ own data-processing terms.
How long we keep things
Email correspondence is kept for as long as the relationship it belongs to is live, and then for as long as we need it for tax, accounting or legal reasons. Host server logs are retained on our provider’s ordinary schedule and are not archived by us.
Your rights
Under the Kenyan Data Protection Act 2019 you have the right to be informed of how your data is used, to access it, to have inaccurate data corrected, to have data deleted, to object to processing, and to have your data transferred to you or another controller.
Write to privacy@kivukolabs.co.ke and we will respond. There is no charge for making a request.
Complaints
If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain to the Office of the Data Protection Commissioner, Kenya’s supervisory authority, at any time.
Changes to this notice
If this notice changes we will update the date at the top of the page. If a change is significant we will say what changed rather than quietly reissuing it.
Draft for review. This notice is written to be accurate about what this website actually does — it is not legal advice and has not yet been reviewed by an advocate. Two items are deliberately open: the controller’s full legal identity and registered office, and whether a separate notice is needed for each venture, which process far more personal data than this page does.