Privacy Policy
Effective date: 29 July 2026
Jilinde Platform Ltd ("we", "us", or "our") operates the Linda mobile application (the "App" or "Linda"). Linda is used by two groups of people:
- Responders — emergency medical, security, roadside assistance and towing personnel who receive and attend to jobs raised through the Jilinde platform.
- Guard force personnel — security officers and supervisors who use Linda for duty operations such as check-in and check-out, patrols, visitor and vehicle logging, asset reporting and occurrence book entries.
This policy explains what personal data we collect through Linda, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It is issued in accordance with the Data Protection Act, 2019 of Kenya and the Data Protection (General) Regulations, 2021.
Jilinde Platform Ltd is registered with the Office of the Data Protection Commissioner. If you also use the Jilinde app as a member of the public, that use is covered by the separate Jilinde Privacy Policy.
Our role and your employer's role
Most Linda users are issued an account by an employer — a security company, ambulance operator, response firm or facility owner (the "Organisation").
- Where you use Linda under an Organisation's account, that Organisation decides what duties you perform, what records you capture and how those records are used. In law, the Organisation is the data controller for that operational data, and we act as a data processor on their instructions.
- We are the data controller for your Linda account itself — your registration details, login credentials, app usage and device information — and for platform-wide safety, security and service improvement.
This matters when you ask us to delete data. We can always delete your account and profile. Records that belong to your Organisation, such as patrol logs or occurrence book entries, must be requested from them.
Information we collect
Information you or your Organisation provide
- Full name, phone number and email address
- Employer or responder organisation, staff or service number, and assigned site or route
- Role, rank or duty category (for example medical, security, roadside, towing)
- Licence, certification or vetting reference where required for the role
- Profile photograph, where your Organisation requires one for identification
- Next of kin or emergency contact, where provided
Location data
Linda collects your device location. This is central to how the service works: it is used to match you to nearby jobs, to guide you to an incident, to allow a dispatcher and the person who raised the alert to track your approach, and to confirm that patrol checkpoints and duty posts were attended.
Location is collected while you are signed in and on duty, including in the background where you have granted that permission. You can turn location permission off in your device settings, but Linda cannot dispatch jobs or verify patrols without it.
Duty and job data
- Check-in and check-out times, shift and roster records
- Jobs assigned, accepted, declined or completed, with timestamps
- Patrol routes, checkpoint scans and patrol completion records
- Incident and occurrence reports you file, including narrative text
- Asset and equipment reports
- Photographs, and where enabled, audio or video attached to a report
- Messages exchanged with dispatchers or the command centre through the App
Device and usage data
- Device model, operating system version and unique device identifiers
- App version, crash reports and diagnostic logs
- Login times, IP address and session records
- Battery and connectivity status, where relevant to duty availability
Health information
Where you are a medical responder, you may view and record health information about a patient in the course of a job. Health information is sensitive personal data. It is handled only for the purpose of delivering the response, is restricted to the personnel attending that job, and must not be copied, retained on your device or disclosed outside the platform.
Information you record about other people
While on duty you will record personal data about people who are not Linda users. This includes visitors, drivers, residents, complainants, witnesses and persons named in an occurrence book entry — typically names, identification numbers, phone numbers, vehicle registrations, photographs, and the time and reason for entry or exit.
When you record this data:
- You are doing so on behalf of your Organisation, which is responsible for having a lawful basis to collect it and for informing those individuals.
- You must collect only what the log or report actually requires, and record it accurately.
- You must not use it for any purpose outside your duties, share it on personal devices or messaging apps, or disclose it to anyone other than your supervisor, the command centre or a lawful authority.
Individuals recorded in these logs have rights over their data. Requests from such persons should be directed to the Organisation that operates the site. We will assist that Organisation in responding.
Why we process your data, and our lawful basis
- To create and operate your account and authenticate you — necessary for the performance of our agreement with you or your Organisation.
- To dispatch, route and track jobs — necessary for the performance of the service and, in emergency cases, to protect the vital interests of the person requiring assistance.
- To record duty attendance, patrols and occurrences — carried out on the documented instructions of your Organisation.
- To verify identity, vetting status and accountability — necessary for our legitimate interest in maintaining a trustworthy responder network, and in some cases to comply with legal obligations applicable to security and medical services.
- To keep the platform safe and secure, and to investigate misuse — our legitimate interest.
- To improve the App and fix faults — our legitimate interest, using diagnostic data.
- To process sensitive data, including health information — only where necessary for emergency medical care, or with explicit consent.
Who we share your data with
- Your Organisation — supervisors, dispatchers and administrators of the company that issued your account can see your duty records, location while on duty, job history and reports.
- The person who requested assistance — when you accept a job, your first name, responder category, vehicle or unit reference and live location are shown to them so they can identify you on arrival. Your personal phone number is not disclosed unless you contact them directly through the App.
- Other responders and the command centre — where a job requires coordination.
- Service providers — cloud hosting and database services (Google Cloud Platform and Firebase), SMS and push notification providers, mapping providers, and payment processors where you receive payments through the platform. These providers act on our instructions and are bound to protect your data.
- Lawful authorities — where we are required by law, court order or lawful request, or where disclosure is necessary to protect life or investigate a serious incident.
We do not sell your personal data, and we do not share it with advertisers.
Transfer of data outside Kenya
Our infrastructure is hosted on Google Cloud Platform and Firebase, with data stored in data centres located in Europe. Some support and analytics providers may also process data outside Kenya.
Where personal data is transferred outside Kenya, we do so on the basis of appropriate safeguards — contractual commitments with our providers requiring an equivalent standard of protection to that required under the Data Protection Act, 2019 — and we remain accountable for that data.
How long we keep your data
- Account and profile data — for as long as your account is active, and deleted after you close it, subject to the exceptions below.
- Location trails — retained for 90 days, then deleted or aggregated so that you can no longer be identified from them, unless the trail forms part of an incident record.
- Job, patrol and duty records — retained for the period instructed by your Organisation, and by default for 24 months.
- Incident and occurrence reports — retained for 7 years, reflecting the period during which they may be needed for legal, insurance or investigative purposes.
- Health information recorded during a job — retained only as part of the incident record, with access restricted to authorised personnel.
- Payment records — retained for 7 years to meet tax and accounting obligations.
- Diagnostic and log data — retained for 12 months.
Security of data
We protect your data using encrypted connections, encryption of sensitive data at rest, role-based access controls so that personnel see only what their duties require, and audit logging of access to incident and health records. Access to production systems is restricted and monitored.
No system can be guaranteed completely secure. You help protect your data by keeping your password confidential, using a screen lock on your device, and signing out on shared devices.
Data breaches
If a breach affecting your personal data occurs, we will notify the Office of the Data Protection Commissioner within 72 hours of becoming aware of it, and we will notify you and your Organisation without undue delay where the breach is likely to result in real risk of harm.
Your rights
Under the Data Protection Act, 2019 you have the right to:
- Be informed of how your personal data is being used
- Access the personal data we hold about you
- Have inaccurate or incomplete data corrected
- Have your data deleted, subject to records we are required to retain
- Object to processing, or request that processing be restricted
- Receive a copy of your data in a portable format
- Withdraw consent, where processing is based on consent
To exercise any of these rights, use the in-app options described below, or contact our Data Protection Officer at the details in the Contact Us section. We will respond within 30 days. We may ask you to confirm your identity before we act on a request.
Where the request concerns records held on behalf of your Organisation, we will forward it to them and support their response.
Data deletion
You may request deletion of your personal data and account at any time directly within the Linda mobile app. Deleting your account permanently removes your profile and personal data from our active systems, subject to any data we are legally required to retain, or that belongs to your Organisation as described below.
How to delete your account — Linda app
- Open the Linda app and log in to your account.
- Tap the menu icon (☰) in the top-left corner to open the navigation drawer.
- Under Account, tap Settings to open your profile.
- Scroll down to the Delete Account option.
- Tap Delete Account and enter your account password to confirm your identity.
- Confirm the deletion when prompted. Your account and associated personal data will be permanently deleted.
Alternatively, you may submit a data deletion request by emailing info@jilinde.com with your registered phone number, and we will process the request within 30 days.
What deletion does not remove
So that you know what to expect:
- Operational records belonging to your Organisation — duty logs, patrol records, job history, incident and occurrence book entries remain with the Organisation that issued your account, because they are that Organisation's records and may be needed for security, legal or insurance purposes. To request removal of those records, contact your Organisation directly.
- Records we are required by law to retain — including incident records and payment records, for the periods set out under "How long we keep your data".
- Data about other people — visitor, vehicle and occurrence entries you recorded on duty belong to the Organisation and are not removed by deleting your account.
Where records must be retained, we restrict them so that they are used only for the purpose requiring retention, and we remove or mask your personal identifiers where doing so does not defeat that purpose.
If you use both Linda and the Jilinde app, these are separate accounts. Deleting one does not delete the other.
Children
Linda is a workforce application. It is not intended for and is not made available to anyone under the age of 18, and we do not knowingly collect personal data from children through it. If you believe a person under 18 has been issued a Linda account, contact us and we will remove it.
Changes to this policy
We may update this policy from time to time. Where a change materially affects how we use your personal data, we will notify you in the App and by email or SMS before it takes effect, and update the effective date above. Continued use of Linda after a change takes effect means you accept the updated policy.
Contact us
For any question about this policy, or to exercise your data protection rights:
- Data Protection Officer, Jilinde Platform Ltd
- General enquiries: info@jilinde.com
- By phone: +254 737 447 066
- Website: https://jilinde.com
If you are not satisfied with how we have handled your personal data or your request, you have the right to lodge a complaint with the Office of the Data Protection Commissioner, Britam Tower, Hospital Road, Upper Hill, Nairobi — complaints@odpc.go.ke — or through the ODPC complaints portal at https://www.odpc.go.ke.
