Privacy Policy

GRUTH is an on-the-ground verification service helping the Kenyan diaspora and remote investors get independent, photo and video evidence on their properties, construction projects, and business interests in Kenya.

For any privacy-related questions, contact us at hello@gruth.it.com.

Account information

When you register, we collect your name, email address, and a hashed password. We do not store plain-text passwords.

Project & request data

When you submit a verification request we collect details about your project — location, service type, budget information, and any supporting notes you provide.

Inspection evidence

Our field inspectors capture photos, videos, measurements and written observations on your behalf. This content is stored securely and made available to you in your private dashboard.

Usage data

We collect standard server logs including IP addresses, browser type, pages visited, and timestamps. This helps us maintain security and improve the platform. We do not sell this data.

Communications

If you contact us via the platform messaging system, email, or enquiry form, we retain those messages to provide support and fulfil your verification request.

• To create and manage your account
• To process, schedule, and deliver verification reports
• To communicate with you about your projects and requests
• To send transactional emails (e.g. report ready, status updates)
• To improve our platform and inspector network quality
• To comply with applicable Kenyan and international laws

We will never sell, rent, or share your personal data with third parties for marketing purposes.

Your data is stored on servers hosted in secure data centres. We use encryption in transit (TLS/HTTPS) and at rest for sensitive fields. Access to production data is restricted to authorised personnel only.

Inspection photos and videos are stored via UploadThing, which uses industry-standard cloud storage with access controls that ensure only you (and our authorised team) can view your project evidence.

While we take all reasonable precautions, no system is completely immune to security breaches. If a breach affecting your data occurs, we will notify you within 72 hours of becoming aware of it.

We retain your account and project data for as long as your account is active or as needed to provide services. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are legally required to retain records (e.g. financial transactions).

You have the right to:

• —Access the personal data we hold about you
• —Correct inaccurate or incomplete data
• —Request deletion of your personal data
• —Object to or restrict certain processing activities
• —Receive a copy of your data in a portable format
• —Withdraw consent at any time where processing is consent-based

To exercise any of these rights, email us at hello@gruth.it.com with subject line “Privacy Request”. We will respond within 30 days.

We use essential session cookies to keep you logged in and to protect your account (CSRF prevention). We do not use third-party tracking cookies or advertising cookies.

We integrate with the following third-party services to operate the platform:

Each provider has its own privacy policy and is bound by applicable data protection laws.

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we'll update the “Last updated” date above. For significant changes, we'll notify you by email or via an in-app banner. Your continued use of GRUTH after changes constitutes acceptance of the updated policy.