Privacy Policy

Who we are

asknjia.com (“Njia”, “we”, “us”) is operated by Ant vs Bear Ltd, a company registered in England and Wales. We provide a transport comparison service for bus, train, and flight routes across East Africa.

Contact: privacy@asknjia.com

What data we collect

We do not collect names, email addresses, payment information, or government ID unless you voluntarily provide them in a chat.

How we use your data

• To show you transport options and prices
• To operate our AI chat assistant (powered by Claude AI)
• To improve our service and fix problems
• To generate anonymous statistics about popular routes

AI chat assistant

Our chat assistant uses Claude AI (by Anthropic) to help you find routes. When you send a message, it is processed by our AI system. The assistant provides travel information and suggestions only — it does not make automated decisions that affect you legally. Conversations may be reviewed for support purposes.

Who we share data with

• Duffel — flight search API. We send search criteria to retrieve flight options.
• Transport operators — when you click through to book, you leave our site. The operator's privacy policy applies.
• Twilio — processes WhatsApp messages on our behalf.
• Supabase — hosts our database (EU servers).
• Vercel — hosts our website.

We do not sell your personal data. We do not share your data with advertisers.

Affiliate links

Njia earns commission when you click through to a transport operator and make a booking. This does not affect the prices you see. When you click an affiliate link, the operator may receive a reference identifying that you came from Njia, but we do not send them your personal information.

Cookies and local storage

We use localStorage (not cookies) to save your language preference. This is strictly necessary for the site to function and does not track you. We do not currently use any tracking cookies.

International data transfers

Ant vs Bear Ltd is based in the United Kingdom. Your data may be transferred to and processed in the UK, EU (database hosting), and the United States (some service providers). We ensure appropriate safeguards are in place.

Your rights

Under the Kenya Data Protection Act 2019, Tanzania Personal Data Protection Act 2022, Uganda Data Protection and Privacy Act, Rwanda Law No. 058/2021, and/or the UK GDPR (depending on your location), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data
• Withdraw consent at any time
• Object to processing based on legitimate interests
• Data portability — receive your data in a structured format

To exercise these rights, email privacy@asknjia.com. We will respond within 30 days.

Data retention

• Search queries: 12 months, then anonymised
• Chat conversations: 12 months, then deleted
• WhatsApp numbers: until you ask us to delete, or 12 months after last message
• Analytics: aggregated and anonymised, kept indefinitely

Security

We use encryption in transit (HTTPS), access controls, and secure hosting. No system is 100% secure, but we take reasonable measures appropriate to the data we process.

Children

Njia is not directed at children under 13. We do not knowingly collect data from children.

Complaints

If you are unhappy with how we handle your data, you can contact:

• Kenya: Office of the Data Protection Commissioner (ODPC) — complaints@odpc.go.ke
• Tanzania: Personal Data Protection Commission (PDPC) — info@pdpc.go.tz
• Uganda: Personal Data Protection Office (PDPO)
• Rwanda: National Cyber Security Authority (NCSA)
• UK: Information Commissioner's Office (ICO) — ico.org.uk

Changes

We may update this policy. The updated version will be posted here with a new date.

Governing law

This policy is governed by the laws of England and Wales, without prejudice to your rights under applicable local data protection laws.