Privacy Policy

Klug provides consumer shopping tools and enterprise retail intelligence services. Where we determine the purpose and means of processing personal data, Klug acts as the data controller.

This policy applies to personal data collected through our marketing website, consumer app, receipt workflows, waitlist forms, and enterprise portals.

• Identity and contact data — name and email address.
• Account and profile data — role, tenant, and preferences.
• Transaction and usage data — shopping lists and in-app actions.
• Receipt-derived data — item names, prices, and store information.
• Location data — where you provide it for nearby branch and pricing features.
• Device and technical data — used for security, diagnostics, and performance.

• To provide and improve Klug services.
• To compare prices, estimate basket costs, and personalize insights.
• To process receipts and generate analytics for your account.
• To secure accounts, prevent abuse, and investigate incidents.
• To comply with legal and regulatory obligations in Kenya.
• To communicate service updates, support messages, and invited product news.

We process personal data on one or more lawful grounds recognized under the Kenya Data Protection Act, 2019, including consent, performance of a contract, compliance with a legal obligation, and legitimate interests that do not override your rights.

We may use cookies and related technologies for session management, analytics, and user experience. You can control cookie preferences through your browser settings where available.

We do not sell personal data. We may share data with trusted service providers who support hosting, analytics, communications, storage, and security under contractual confidentiality and data protection obligations.

Where data is processed outside Kenya, we take reasonable steps to ensure adequate safeguards, including contractual protections and security controls consistent with Kenyan data protection requirements.

We retain personal data only for as long as necessary for service delivery, legal compliance, dispute resolution, fraud prevention, and audit purposes. Retention periods may vary by data type and user role.

Subject to applicable law, you may:

• Request access to your personal data.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict how we process your data.
• Withdraw consent where processing is consent-based.
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.

We apply technical and organizational controls designed to protect personal data from unauthorized access, loss, misuse, and alteration — including access controls, environment segregation, and audit logging.

Klug services are not directed to children without proper legal basis and parental or guardian authorization where required by law.

We may update this policy from time to time. If changes are material, we will provide appropriate notice through our products or website.