1. Who we are
SendOff Kenya is operated by Redbarn Information Security Ltd ("we", "us"), a company registered in the United Kingdom, for the committees organising funerals in Kenya. This policy explains what information we collect when you use the SendOff Kenya mobile app (on iOS and Android) and this website, how we use it, who can see it, and the choices you have.
SendOff Kenya is a tool for the small committee that organises a funeral. One person creates an event and invites the others. Much of what is recorded in an event is about other people: the person who has died, contributors, and the people you invite. The committee decides what to record, so please only enter information about other people that you are entitled to share with your committee.
2. Information we collect
Your account. When you create an account with an email address we store your name, your email address and your password. Your password is stored by our authentication provider in a scrambled (hashed) form; we never see it in plain text. If you sign in with Google or with Apple, we receive your name and email address from that provider and we never receive your Google or Apple password. If you choose to hide your email address when signing in with Apple, we receive the forwarding address that Apple gives us instead.
What your committee records. Everything you and your committee enter into an event is stored so that the committee can see it. That includes:
- The event: the name of the person who has died, the event name, the burial date and the burial location.
- The committee: each member's name and role, and the email addresses of the people invited to join.
- Tasks: names, notes, due dates, status, blockers and who each task is assigned to.
- Money: the agreed budget and budget items; contributors' names and whether they asked to remain anonymous; contributions, pledges and pledge payments with amounts, dates, payment method and notes (for example an M-Pesa code); expenses with the amount, purpose, who was paid and how.
- Meetings: date and time, notes, decisions, actions and attendees.
- Communications and Daily Briefs: the messages the committee writes to share with the wider community.
- History: who created or changed each record and when, so that the committee's books stay complete. This is kept as your name and the time, alongside your account.
Push notifications. If you allow notifications, we store a push token for your phone together with whether it is an iPhone or an Android phone. It is removed when you sign out or delete your account, and when the push service tells us it has stopped working.
Invitations. When you invite someone we keep a record of who sent each invitation email and when. We use it only to limit how many invitation emails one account can send in an hour.
On your phone. The app keeps your signed-in session, your appearance choice (light, dark or system) and whether you have seen the notifications prompt in its own storage on your phone. These are removed when you sign out or uninstall the app.
Technical logs. Our servers and hosting providers keep standard technical logs for a limited time, such as the time of a request and the network address it came from, to keep the service running and secure. Our own logs never contain passwords, sign-in tokens or the contents of financial records.
What we do not collect. SendOff Kenya has no analytics or tracking, no advertising, and no crash-reporting service. It does not ask for your location, your contacts, your photos or your camera. It does not take or process payments and never asks for M-Pesa, card or bank details. This website sets no cookies and runs no analytics.
3. How we use your information
We use the information above to:
- Run the app: sign you in, show each committee member what their role allows, and keep the committee's records.
- Send the emails the app needs: an email to verify your address when you sign up, a password-reset email when you ask for one, and invitation emails to the people a Chairperson invites.
- Send push notifications, if you have allowed them: when you are invited to an event, when a task is assigned to you, the day before a task you are assigned is due, when the event's details change, and when a new communication is posted. Notifications are never sent for a closed event.
- Answer your support requests.
- Protect the service, for example by limiting how many invitation emails an account can send.
- Meet legal obligations.
We do not sell your personal information, we do not use it for advertising, and we do not build profiles of you.
4. Who can see your information
Your committee. Information in an event is visible to the members of that event according to their role. The Chairperson can adjust what each role can see and do. A contributor who asks to remain anonymous is shown as "Anonymous" to everyone except the Chairperson, Treasurers and Secretaries, and is never named in a shared message or a public page. Nobody outside the committee can see an event unless a member shares something from it.
Sharing to WhatsApp and other apps. Communications and Daily Briefs can be shared through your phone's share sheet. What you share leaves SendOff Kenya and is governed by the app you share it to.
Public links. A member with the right permission can create a public link to a Daily Brief, which opens as a page on this website. Anyone who has that link can read that Brief's contents without an account. The link can be switched off at any time, stops working when the event is closed, and is not listed by search engines. The page sets no cookies and runs no analytics. Contributor names appear on it only if the Chairperson has switched that setting on, and a contributor who asked to remain anonymous is never named.
After someone leaves. When a member is removed from an event, or deletes their account, they lose access to the event, but the records they created stay with the event under their name so the committee's books remain complete.
Our administrators. A small number of administrator accounts held by us can view events in order to support committees, for example to hand the Chairperson role to another member when the Chairperson cannot be reached. Administrator actions are logged.
Service providers. The companies listed in the next section process data on our behalf so that the app can work.
Legal requirements. We may disclose information if the law requires it.
5. Third-party services
SendOff Kenya relies on a small number of services to work. Each processes data under its own privacy policy:
- Supabase hosts our database and handles sign-in (accounts, passwords, email verification and password reset).
- Google Cloud runs our server, which sends invitation emails and push notifications, runs the daily task reminder, and stores our nightly database backups.
- Expo delivers push notifications to your phone, using Apple's and Google's notification services.
- Resend sends our emails (verification, password reset and invitations) from a sendoff.co.ke address.
- Google and Apple, if you choose Sign in with Google or Sign in with Apple.
- Cloudflare hosts this website.
- Google Fonts supplies the typefaces on this website, which means your browser requests them from Google's servers when you visit.
6. Where your data is stored, and for how long
Your data is stored in our database hosted by Supabase in London, United Kingdom. Nightly backups of the database are stored with Google Cloud in London. Daily backups are kept for about a week, weekly backups for about a month and monthly backups for about three months, after which they are deleted automatically.
We keep your account for as long as you keep it. We keep an event's records for as long as the event exists, including after it is closed: a closed event becomes read-only for every member, and nothing in it is deleted. Financial records are never deleted, even by the committee; a mistaken record is marked as void with a reason, and the original stays visible in its history. This is deliberate: the app exists to keep a funeral's finances transparent.
Information that has been deleted from the live database may remain in a backup until that backup expires, as described above.
7. Deleting your account
You can delete your account from inside the app at any time: open Profile, choose Delete account and confirm. Deletion happens immediately. Your sign-in and profile are removed, you leave every committee you belong to, and your push tokens are deleted. The records you created stay with their events under your name, with the link to your account removed. If you chair an active event, you will be asked to hand that role to another member first.
If you can no longer sign in, email us instead. The data deletion page explains both routes in full.
8. Security
Your data travels between the app and our servers over encrypted connections (TLS), and our hosting providers encrypt it at rest. Access rules in the database itself decide what each member of an event can see and change, so a member's permissions are enforced on the server, not only in the app. Anonymous contributors are masked by the database before their names could reach a phone. The app contains no secret keys. Our server logs never record passwords, sign-in tokens or the contents of financial records.
The app keeps your signed-in session in its own storage on your phone so you do not have to sign in every time. That storage is private to the app but is not separately encrypted, so we recommend protecting your phone with a passcode or biometric lock. No method of storage or transmission is completely secure, but we work to protect your information using standard, careful practices.
9. Children's privacy
SendOff Kenya is for adults organising a funeral. It is not directed at children under 18, and we do not knowingly collect personal information from them. If you believe a child has created an account, please contact us and we will delete it.
10. Your rights
You have the right to know what personal information we hold about you, to have it corrected, to have it deleted, and to object to how it is used. You can change your name in the app's Profile screen, and the committee can correct the records in an event. To exercise any other right, email our contact address from the address on your account.
Because we are a United Kingdom company, we handle your information under the UK GDPR and the Data Protection Act 2018, and you may complain to the UK Information Commissioner's Office. If you are in Kenya, you also have rights under the Data Protection Act, 2019, and may complain to the Office of the Data Protection Commissioner. If you are in a country with its own data-protection law, you may have further rights under it.
Information about you may also have been entered into an event by a committee member, for example as a contributor. You can ask us, or the committee's Chairperson, about it in the same way.
11. Changes to this policy
We may update this policy from time to time. When we do, we will update the date at the top of this page and, for significant changes, tell you in the app or by email.
12. Contact
If you have any questions about this policy or how we handle your data, email our contact address .