Privacy Policy

1. Who we are

Safubi ("we", "us") provides Safubi Antivirus, Safubi DNS and Safubi VPN. For the purposes of the Kenya Data Protection Act, 2019, Safubi is the data controller for personal data described here. Contact: privacy@safubi.com.

2. Safubi Antivirus (Windows app)

Scanning happens on your PC. Files, scan results and quarantine stay on your device. The app contacts the internet only to download signature and blocklist updates and, if you use the VPN, to talk to your Safubi account. We do not upload your files.

3. Safubi DNS and VPN

• Account data: name, email address and a securely hashed password.
• DNS queries: the domain names your devices look up, needed to decide whether to block them. Allowed lookups are never stored. For each profile you choose whether blocked lookups are logged (domain, time and reason) or nothing is logged. Daily totals of queries and blocks are kept for your dashboard.
• Linked IP addresses: the public IP you link to a profile, so we can apply your settings.
• VPN: each device's WireGuard public key and assigned tunnel address. Your private key is created on your device and never sent to us. We do not log the websites you visit over the VPN beyond the DNS logging you chose.
• Payments (when available): M-Pesa transaction references and phone numbers, handled with our payment provider.

4. Why we use it (lawful basis)

To provide the service you signed up for (contract), to keep the service secure and prevent abuse (legitimate interest), and to meet legal obligations such as tax records.

5. Retention

The blocked-site log keeps only the most recent 500 entries per profile; older entries are deleted automatically. Daily statistics are kept while your account is active. When you delete your account, your data is deleted within 30 days, except records we must keep by law.

6. Sharing

We never sell your data. We share it only with service providers that host or operate our service under contract, or when required by Kenyan law.

7. Your rights

Under the Data Protection Act you may request access to, correction of, or deletion of your personal data, object to processing, and complain to the Office of the Data Protection Commissioner. Email privacy@safubi.com.

8. Security

Encrypted connections (HTTPS, DNS-over-HTTPS/TLS, WireGuard), hashed passwords and restricted server access.

9. Children

Accounts are for adults. Parents and schools may use Safubi to protect children's devices; in that case the account holder is responsible for informing the users.

10. Changes

We will post updates here and email account holders about significant changes.