Privacy Policy

Introduction

Welcome to Brand Assurance. Brand Assurance (“we,” “us,” or “our”) operates the Brand Assurance Partner mobile application and the web platform located at brandassurance.co.ke. We operate as a technology provider and insurance intermediary in Kenya, connecting customers with trusted insurance providers and partners across all 47 counties.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services. We are committed to protecting your personal data and ensuring compliance with the Kenya Data Protection Act, 2019 (KDPA) and global digital platform standards, including Google Play Developer policies. By using our application, you consent to the data practices described in this policy.

Data Collection

We collect information that identifies, relates to, describes, or could reasonably be linked with you as an individual or business partner. This includes:

• Account & Identity Information: Full legal names, national identification numbers (ID/Passport), business registration details, physical/postal addresses, corporate email addresses, phone numbers, and professional licensing data.
• Financial & Insurance Information: Information required to evaluate risk, process insurance quotes, arrange policy coverage, and handle claims payouts. This may include asset details, vehicle valuation parameters, registration plates, and underwriting history.
• Sensitive Device Permissions (Google Play Compliance): Our application explicitly requests access to your device's photo gallery and video storage through READ_MEDIA_IMAGES and READ_MEDIA_VIDEO permissions. These permissions are strictly used to allow users and partners to capture, choose, and upload media evidence, including scene of accident photos, digital copies of physical insurance documents, identification cards, and asset valuation videos required for policy underwriting and claims verification.

Usage of Data

Brand Assurance uses the collected personal and technical data for specified, explicit, and legitimate business operations, including:

• Providing, maintaining, and improving the functionality of the Brand Assurance Partner application.
• Processing digital insurance distribution requests, managing policy quotes, and facilitating underwriting with regulated insurers.
• Verifying documentation, identifying fraud, and streamlining the digital verification of insurance claims.
• Managing partner accounts, authenticating users via secure login paths, and providing customer support.
• Complying with mandatory regulatory obligations issued by the Insurance Regulatory Authority of Kenya (IRA) and keeping required operational audit trails.

Data Sharing

We do not sell your personal or business data. We only share data with designated entities under strict confidentiality agreements to facilitate our core insurance services:

• Regulated Insurance Providers: We transmit operational underwriting and risk data to Kenya-based insurance agencies, underwriters, and licensed ecosystem entities, such as Orion Insurance Agencies Limited, to formalize your insurance contracts and process valid claims.
• Assessors and Garages: Relevant asset, damage photos, and location data are shared with certified assessors and repair garages across the 47 counties to coordinate valuations and accident restorations.
• Legal & Regulatory Authorities: We will disclose information when legally compelled to do so by the Insurance Regulatory Authority (IRA), the Office of the Data Protection Commissioner (ODPC) Kenya, or other relevant statutory bodies to comply with prevailing laws, anti-money laundering (AML) regulations, and fraud investigations.

Security

The security of your data is our highest priority. We implement appropriate technical, physical, and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction, in alignment with Section 41 of the Kenya Data Protection Act.

• All data transmitted between the Brand Assurance Partner mobile application and our backend cloud servers is encrypted using industry-standard Transport Layer Security (TLS/HTTPS).
• Stored user databases and sensitive documentation, including uploaded claims photos and videos, are kept in secure, access-controlled cloud environments using modern data-at-rest encryption protocols.
• We regularly review our collection, storage, and processing practices, including physical security measures, to guard against unauthorized system intrusions.

Your Rights

Under the Kenya Data Protection Act (2019) and Google Play guidelines, you hold legal rights regarding your personal information:

• Right to Access and Rectification: You have the right to request a copy of your data or ask us to update inaccurate or incomplete information inside your profile.
• Right to Object / Restrict Processing: You can object to the processing of your data or request that we limit how your details are utilized.
• Right to Deletion / Erasure: You have the right to request that your account and associated personal data be permanently deleted from our live systems.

Data Deletion Provision & Regulatory Retention: You may initiate an account deletion request at any time by sending an explicit email to support@brandassurance.co.ke.

Please note that your right to erasure is legally subject to prevailing statutory laws in Kenya. As an insurance intermediary platform, certain financial data, policy contracts, audit records, and claims histories must be securely retained for mandatory minimum statutory durations under the Insurance Act of Kenya and global Anti-Money Laundering laws. Where data retention is legally required, your personal account will be deactivated and decoupled from processing, but the underlying compliance transaction files will be preserved as required by law.