Privacy notice

Reviewed on 23 September 2026 by the Tulinde editorial team · how we check facts

Short answerChecked 23 September 2026

We collect only what you type in the quote form, share it only with licensed insurers or brokers in your country, store it in the EU (Belgium) with your consent, and delete it after 12 months. Version 0.1 — draft for legal review.

In short

What we collect: only what you type in the quote form — the cover you need, your name, your mobile number, and optionally your email, town and a short note — plus the date and the version of the consent you gave.
Why: to pass your request to insurers or brokers licensed in your country so they can contact you with a quote. Tulinde is paid by those providers for the introduction.
Who receives it: only insurers or brokers on the regulator's list of licensed companies in your country.
Where it is stored: on servers in the European Union (Belgium). Your data therefore leaves your country; we only do this with your explicit consent, and we protect it with encryption in transit and restricted access.
How long: 12 months after your request, then deleted.
No consent, no transfer: the consent box is never pre-ticked, and without it nothing is sent.

Browsing without asking for quotes

Reading the guides requires no account and no form. We do not use advertising cookies. Our servers keep standard technical logs (address, time, page) for security for a short period.

Your rights

In all four countries you can ask to see the data we hold about you, correct it, withdraw your consent, and have it deleted. Withdrawing consent stops any further sharing; providers who already received your request must be contacted directly. You can also complain to the data-protection authority of your country, listed below.

Contact details for privacy requests will be published here before launch.

Kenya

Law: the Data Protection Act, No. 24 of 2019, in force since 25 November 2019. Authority: the Office of the Data Protection Commissioner, which receives complaints at cie.odpc.go.ke.

Section 30 allows processing with consent for a specified purpose; section 32 lets you withdraw consent at any time and puts the burden of proving consent on us. Section 48 governs transfers outside Kenya: Tulinde documents the safeguards of its EU hosting and relies on your consent. Section 49 requires consent for sending sensitive data (which includes health data) abroad — the form does not ask for any, so please do not add health details in the optional note.

Tulinde will register as a data controller with the ODPC before launch, as the Data Protection (Registration of Data Controllers and Data Processors) Regulations, 2021 require.

The consent you give in Kenya (version ke-0.1): “I agree that Tulinde (Takat AI) stores my details on servers in the European Union and passes them to insurers or brokers licensed by the Insurance Regulatory Authority so they can contact me with quotes. I understand my data leaves Kenya, that I can withdraw this consent at any time, and that this consent is given under the Data Protection Act, 2019.”

Uganda

Law: the Data Protection and Privacy Act, 2019. Authority: the Personal Data Protection Office, set up within the National Information Technology Authority – Uganda (NITA-U).

Section 7 requires your prior consent — freely given, specific, informed and unambiguous (section 2) — before we collect or process your data. Section 19 allows data to be stored outside Uganda where the other country offers equivalent protection or where you have consented: Tulinde stores data in the European Union and relies on both.

Tulinde will register with the Personal Data Protection Office before launch.

The consent you give in Uganda (version ug-0.1): “I agree that Tulinde (Takat AI) stores my details on servers in the European Union and passes them to insurers or brokers licensed by the Insurance Regulatory Authority of Uganda so they can contact me with quotes. I understand my data leaves Uganda, that I can withdraw this consent at any time, and that this consent is given under the Data Protection and Privacy Act, 2019.”

Tanzania

Law: the Personal Data Protection Act, 2022 (Act No. 11 of 2022), in force since 1 May 2023. Authority: the Personal Data Protection Commission.

Section 32(4) of the Act allows personal data to be sent to a country without an adequacy finding when the person has consented. Tulinde relies on your explicit consent for the transfer to EU servers. Data controllers must register with the Commission (sections 14–20); Tulinde will register before launch.

We do not ask for health details in the form. If you write any in the optional note, they are sensitive data under section 3 of the Act; please leave them out — the provider will ask what they need.

The consent you give in Tanzania (version tz-0.1): “I agree that Tulinde (Takat AI) stores my details on servers in the European Union and passes them to insurers or brokers licensed by TIRA so they can contact me with quotes. I understand my data leaves Tanzania, that I can withdraw this consent at any time, and that this consent is given under the Personal Data Protection Act, 2022.”

Ethiopia

Law: the Personal Data Protection Proclamation No. 1321/2024, in force since its publication in 2024. Authority: the Ethiopian Communications Authority.

Article 8 requires consent that is given before processing, free, informed, specific and clear, and that can be withdrawn. Article 22 requires personal data collected in Ethiopia to be stored on a server in Ethiopia, and cross-border transfers of sensitive data need the Authority's prior approval.

Because Tulinde is hosted in the European Union, we do not collect quote requests from Ethiopia at this stage. Reading our Ethiopian guides collects no personal data.