Privacy notice

Who is responsible for your data

Bona Fama Digital, Nairobi, Kenya ("we", "us") runs FamaCue and decides how your personal data is used. We aim to handle personal data in line with Kenya's Data Protection Act, 2019. To ask us anything about your data, use the support page inside FamaCue or the contact form at bonafama.digital/contact-us.

What we collect and why

• Account details: your name, email address, and a password (stored only as a one-way hash) or, if you sign in with Google or Microsoft, that provider's account identifier and verified email. We use these to run your account and to contact you about it.
• Your projects: website addresses, keywords, questions, the queries, countries and numbers you import or sync, your topic groups, notes, and any articles you generate. We use these to provide the service.
• Google Search Console data (only if you connect it): query, page, country, click and impression figures for the sites you choose. See the Google statement below.
• Payments: Paystack takes your payment details on its own page. We receive your email, a Paystack customer and subscription reference, the plan, and whether payments succeeded. We never receive or store card numbers.
• Support messages you send us, and a record of your usage (searches, checks and articles used each month) so we can apply your plan's limits.
• Technical data: a session cookie and a security cookie so you can stay signed in, and basic server logs (such as IP address) for security and fault-finding. We do not use analytics or advertising cookies.

Who else handles data for us

• AI writing (OpenAI): when you generate or revise an article, we send OpenAI the topic, keywords, the questions and the titles or addresses of your site pages that you have supplied, plus your instructions, and receive the draft back. OpenAI processes this to provide the service under its business terms for API use. Do not put confidential or personal data about other people into topics or instructions.
• Search data providers: to find questions people ask, we send search queries (keywords and a country) to specialist data companies. These requests contain no account or personal details.
• Payments (Paystack): processes subscriptions and payments.
• Security check (Cloudflare Turnstile): on sign-up, a Cloudflare script checks that a visitor is human; Cloudflare receives technical information from your browser.
• Live chat (if switched on): signed-in users may see a chat widget from a third-party provider, which receives what you type into it.
• Hosting and backups: our hosting provider stores the service and its backups.

We do not sell your personal data. Some of these companies are outside Kenya (for example in the United States and Europe), so your data may be processed in other countries; we use providers that apply recognised safeguards.

Google user data

FamaCue's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request read-only access to Search Console (the "webmasters.readonly" scope). We use that data only to show you your own search performance and to compare it with the questions we find. We do not sell it, use it for advertising, or transfer it to others except as needed to provide the service, comply with the law, or with your consent. No person at our company reads your Search Console data except to give you support you ask for or to keep the service secure. AI features receive only the topics and page details you choose to use, not your raw Search Console tables. You can disconnect at any time in FamaCue (which deletes the stored token) and revoke access at your Google account permissions page.

How long we keep data

We keep your account and project data while your account is active. If a free trial ends without a subscription, we delete the project data 30 days later. If you cancel or ask us to delete your account, we delete your project data within 30 days. We keep payment and invoice records as long as the law requires. Backups are overwritten on a regular cycle.

Your choices and rights

You can see, correct and export your data in the app, delete a project under Settings, Data & privacy, and disconnect Search Console at any time. You may also ask us for a copy of your personal data, to correct it, or to delete your account, and you may object to or ask us to limit some uses. Contact us as above. If you are not satisfied with our answer, you can complain to your data protection authority (in Kenya, the Office of the Data Protection Commissioner).

Security

Connection keys and tokens are encrypted, passwords are hashed, access is restricted, and Search Console access is read-only. No online service is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.

Children

FamaCue is for people aged 18 and over. We do not knowingly collect data from children.

Changes

We may update this notice. We will tell you about material changes by email or in the app, and the effective date above will change.