Privacy Policy for TALKAM Human Rights App and Devatop Centre for Africa Development Websites

Information from TALKAM Human Rights App or any associated platforms are used for any or some of the following purposes:

1. Facilitate case reporting and management of human rights abuses.
2. Responding to reported cases of human rights abuses
3. Enhance user experience by personalizing app features.
4. Provide user support and respond to inquiries.
5. Improve the app through usage analytics and feedback.
6. Comply with legal obligations and protect user safety.

We process personal information based on:

1. User Consent: Obtained during registration or before collecting sensitive data.
2. Legitimate Interests: Improving app functionality and promoting human rights advocacy.
3. Legal Obligation: Compliance with applicable laws or judicial processes.
4. Case Management: In line with our mandate and legal duties, we use and as well as share information about reported human rights abuses to legal entities whose responsibilities involve responding to cases. Such entities include anti-human trafficking agencies, human rights agencies/organizations, and relevant law enforcement agencies within the country of operation. The case managers respond to reported cases, under strict confidentiality agreements. These case managers can be in any country but are bound by data protection agreements.
5. With Service Providers: Entities that support our operations (e.g. hosting, analytics), bound by data protection agreements.

1. Data is securely stored on servers (cloud) compliant with international security standards.
2. Personal information is retained only as long as necessary to fulfil its purpose or comply with legal obligations.
3. Reports of abuse are anonymized to protect user privacy.

Our app and web servers are protected, and our systems are monitored to prevent unauthorized access.  We are constantly vigilant in preventing cyber-attacks, fraudulent intrusion, unauthorized access, loss or corruption of personal data. 

We implement robust measures to secure your data, including:

1. Encryption of sensitive data in transit and at rest.
2. Periodic security audits and vulnerability assessments.
3. Legal Obligation: Compliance with applicable laws or judicial processes.
4. Access controls limit data access to authorized personnel only.
5. With Service Providers: Entities that support our operations (e.g. hosting, analytics), bound by data protection agreements.
6. Training of case managers on data privacy and security.

Although we will do our best to protect the personal information you provide to us, we advise that no method of electronic transmission or storage is 100% secure and no one can guarantee absolute data security.

You are responsible for selecting any password and its overall security strength, ensuring the security of your own information within the bounds of our services. For example, ensuring any passwords associated with accessing your personal information and accounts are secure and confidential.

We encourage every user to maintain the security of their own devices and passwords by:

1. Using strong and secure passwords.
2. Logging out from the App after any use.
3. Ensuring the user is the only one with access to the App on their device.

We strongly recommend one account for one user and discourage the user from sharing his login details with a second party or on any platform accessible to the public.

In reporting human rights abuses, there are types of personal data (like contact) that are mandatory for case managers (admins and human rights agencies/organizations) to process in order to carry out your instructions or perform our legal mandate (responding to the human rights abuses, following up with reporter to get more clarifications on certain information that will aid investigation of cases) for your benefit. If you withhold such information, it may be impracticable to carry out our mandate in relation to you. If you seek more clarification on our data processing contact our designated Data Protection Officer as provided under the last ARTICLE below.

1. Right to be Informed
2. Right of Access
3. Right to Rectification
4. Right to Object to Processing
5. Right to Data Portability
6. Right to be Forgotten
7. Right in Relation to Automated Decision Making (which essentially entitles you to human intervention)

In carrying out our mandate effectively, we may require the services of third parties. Examples of such services include but are not limited to the following:

1. Internet connectivity
2. Cloud storage
3. Data analytics
4. Data security
5. Software development

In transferring your data to third parties, we shall be guided by the NDPA and relevant laws and regulations that guide data protection in any country of use.

Where data is transferred outside your country, we ensure it is protected and adhered to relevant privacy laws which include the General Data Protection Regulation (GDPR) of the European Union, Australian Privacy Act Compliance (AU), U.S. States Privacy Law Compliance, Personal Information Protection and Electronic Documents Act (PIPEDA) Compliance (Canada), and African Union Convention on Cybersecurity and Personal Data Protection.

We may use cookies and tracking technologies to:

1. Improve app functionality
2. Analyze usage patterns
3. Offer personalized content

In the case of cookies, we ensure that they have security protocols and are not vulnerable to abuses by anyone.