Pre-Launch Privacy Policy · Your Data, Your Rights · Return to DemoCry →
Legal Document · Data Protection

Privacy Policy

Your data belongs to you. We use only what we need, protect it fiercely, and never sell it to anyone.

Version 1.0 · Pre-Launch
Effective: 26 June 2026
Contents
  1. Our Promise To You
  2. Who We Are (Data Controller)
  3. What Data We Collect
  4. How We Use Your Data
  5. Video Verification Data (Special Category)
  6. Blockchain & Vote Data
  7. Legal Basis for Processing
  8. Who We Share Data With
  9. International Transfers
  10. How Long We Keep Data
  11. Security Measures
  12. Your Rights
  13. Cookies & Tracking
  14. Children's Privacy
  15. Kenya Data Protection Act
  16. EU/UK GDPR Compliance
  17. Changes to This Policy
  18. Contact & Complaints

DemoCry ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and the rights you have over it.

This policy applies to all users of DemoCry, regardless of location. Where applicable, we comply with the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, the Kenya Data Protection Act 2019, and other relevant privacy laws.

01Our Promise To You

Before the legal detail, here is what we commit to:

Special commitment for DemoCry: Because DemoCry is a platform for civic participation, we take particular care to protect the anonymity of your votes and the confidentiality of your civic engagement. See Section 6 and Section 5 for details.

02Who We Are (Data Controller)

The data controller responsible for your personal data is:

Kudos AiN Ltd
Company Number: 17177713 (United Kingdom)
Registered in England and Wales
Operational base: Nairobi, Kenya
Contact: privacy@democry.world

03What Data We Collect

Category What Why
Account Data Name, email address, password (hashed), account creation date To create and manage your account
Payment Data Payment method reference (not full card details), transaction records, subscription status To process subscriptions. Full payment details are held by our payment processors, not us.
Vote Data Anonymized vote records on blockchain, timestamps To count your vote and provide public verification. Cryptographically separated from your identity.
Video Verification Short video (1-3 seconds) of you saying your vote choice To verify you are a real human. Processed by AI, then deleted (see Section 5).
Referral Data Referral codes, records of who referred whom, commission earnings To pay referral commissions correctly
Technical Data IP address, browser type, device type, general location (country/city level), pages visited Security, fraud prevention, service improvement
Communications Emails you send us, support tickets, feedback To respond to you and improve the service

04How We Use Your Data

We use your data to:

We do not use your data to:

05Video Verification Data (Special Category)

Because video contains biometric-identifying information, we treat it as a special category of personal data requiring extra protection.

How It Works

When you cast a vote, you are asked to record a short video (typically 1-3 seconds) of yourself speaking a specific phrase (for example: "I want peace" or "I want war").

What Happens To The Video

  1. The video is transmitted to our secure processing servers using end-to-end encryption
  2. Our AI system analyzes the video to verify: (a) you are a real human being (not a bot, deepfake, or generated content), (b) you spoke only the prescribed vote words, and (c) the recording is live and not previously submitted
  3. Once verification is complete, your vote is recorded on blockchain in anonymized form
  4. The video itself is deleted from our systems within 72 hours of verification
  5. Only a cryptographic hash of the verification result is retained, which cannot be reversed to reconstruct the video

Your Explicit Consent Required

Before any video is captured, you will be asked to explicitly consent to this process. You may vote using alternative verification methods (where available) if you prefer not to provide video.

Special protections: We do not use your video for facial recognition against any external database. We do not sell, share, or transfer video data to any third party. We do not use it to train AI models beyond the immediate verification purpose. Videos are stored only in encrypted form and deleted within 72 hours.

06Blockchain & Vote Data

Votes on DemoCry are recorded on the Stellar blockchain to ensure they are permanent, publicly verifiable, and cannot be manipulated.

What Goes On-Chain

What Does NOT Go On-Chain

Blockchain Immutability

Because blockchain records are immutable by design, once a vote is recorded it cannot be edited, deleted, or reversed, even by us. This is a fundamental design choice to protect the integrity of the vote against future political pressure or corporate takeover.

Under GDPR "right to erasure", we will delete your personal identifying data from our systems on request. However, the anonymized vote itself remains on chain and is not personally identifying to you.

Under GDPR, we process your data on the following legal bases:

08Who We Share Data With

We share your data only with:

All third-party processors are bound by contract to protect your data to at least the same standard as this policy. A full list of current processors is available on request from privacy@democry.world.

09International Transfers

DemoCry operates globally. Your data may be transferred to and processed in countries outside your own, including the United Kingdom, Kenya, and jurisdictions where our service providers operate.

Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place, including:

10How Long We Keep Data

Data Type Retention Period
Account data While your account is active + 90 days after closure
Payment records 7 years (tax and legal compliance)
Video verification files Deleted within 72 hours
Vote records on blockchain Permanent (immutable by design, but anonymized)
Support communications 3 years
Security/fraud logs 12 months

11Security Measures

We take extensive measures to protect your data. Full details are in our Security Statement. In summary:

12Your Rights

Under GDPR, UK GDPR, and Kenya's Data Protection Act, you have the following rights:

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Correct inaccurate or incomplete data we hold about you.

Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data. Note that anonymized blockchain vote records cannot be deleted due to blockchain immutability, but they do not identify you.

Right to Restrict Processing

Ask us to limit how we use your data in certain circumstances.

Right to Data Portability

Receive your data in a portable, machine-readable format.

Right to Object

Object to processing based on legitimate interests, including for direct marketing.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw consent at any time.

Right to Complain

Lodge a complaint with your national data protection authority (see Section 18).

To exercise any of these rights, email privacy@democry.world. We will respond within 30 days.

13Cookies & Tracking

DemoCry uses only essential cookies required for the Platform to function (session management, security, load balancing).

We do not use:

Because we use only essential cookies, no cookie consent banner is legally required. You may still block cookies in your browser settings, though some Platform features may not work correctly.

14Children's Privacy

DemoCry is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18.

If we discover that a user is under 18, their account will be closed and their data deleted immediately. If you believe a minor has provided us with data, please contact privacy@democry.world immediately.

15Kenya Data Protection Act

For users in Kenya, we comply with the Kenya Data Protection Act 2019 (KDPA). Your rights under KDPA mirror those in Section 12.

Kenyan users may lodge complaints with:

Office of the Data Protection Commissioner (ODPC)
Britam Tower, Upperhill
Nairobi, Kenya
Website: www.odpc.go.ke
Email: info@odpc.go.ke

16EU/UK GDPR Compliance

For users in the European Economic Area (EEA) and United Kingdom, we comply with the EU GDPR and UK GDPR respectively.

EU Representative

Where required, we will appoint an EU representative under Article 27 GDPR. Current contact for EU-related privacy matters: eu-privacy@democry.world.

UK Users

UK users may lodge complaints with:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113

17Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to you via email at least 14 days before they take effect.

Previous versions are archived and available on request.

18Contact & Complaints

For any privacy-related questions, requests, or complaints:

Privacy Team

Email: privacy@democry.world

Data Protection Officer: dpo@democry.world

Post: Kudos AiN Ltd, Privacy Team, United Kingdom

We aim to respond to all privacy inquiries within 30 days.

Your privacy is not our product.
Your privacy is our promise.