This policy explains how the CCTS Field Agent mobile application ("the App") handles information. The App is a professional field tool issued to authorised campaign agents. It is not a consumer application and is not intended for use by the general public or by children.
Who is responsible for your data
The App is operated on behalf of the political campaign or party organisation ("the Campaign") that issues agent accounts. The Campaign is the data controller for personal data collected through the App. CCTS provides the software and hosting as a data processor acting on the Campaign's instructions. Questions about a specific campaign's data handling should be directed to that campaign; general questions may be sent to the contact address below.
Information the App collects
- Agent account data — the email address and phone number used to sign in, the agent's login credentials, and a session token stored securely on the device.
- Device identifier — when an agent signs in, the App reads the
Android device identifier (
ANDROID_ID) and binds the agent's account to that handset. This is a security measure: it stops agent credentials from being shared or used on several devices. The identifier is not used for advertising or for tracking the agent across other apps. - Constituent / voter records entered by the agent — names, phone numbers, national identification numbers, voter-registration details, polling-station assignment, an indicated level of political support (for example strong, leaning, undecided, or not supporting) and engagement status, and optional demographic details (gender, age group, profession) and free-text notes, captured during voter identification and supporter recruitment.
- Precise location (GPS) — captured only at the moment a field submission is made (supporter, turnout, incident, or tally report), to prove the report was filed at the correct location. The App does not track location in the background.
- Photos — images the agent explicitly captures with the camera (e.g. a photograph of a completed results form). The App opens the camera only when the agent initiates this, and it does not read the device's existing photo library.
- Device connectivity state — used to decide when to sync queued data.
The App does not collect advertising identifiers, contacts, browsing history, or analytics/tracking data, and does not sell any data.
How information is used
Collected information is used solely to authenticate the agent; restrict each agent account to a single authorised device; record and sync voter-identification, supporter, turnout, incident, and parallel-vote-tally reports to the Campaign's secure backend; and verify the integrity and location of those reports. It is not used for advertising or profiling.
Storage and security
- Personal data queued on the device for offline submission is stored in a local database that is encrypted at rest (AES-GCM). The session token is held in the platform secure keystore.
- All communication with the backend is over HTTPS with certificate pinning; plaintext connections are disabled.
- Data synced from the device is transmitted to the Campaign's CCTS backend and retained there under the Campaign's control.
Data sharing
Data is transmitted only to the Campaign's own CCTS backend. It is not shared with third parties except as required to operate that backend (hosting) or where required by law.
One exception is worth stating plainly: when an agent uses the in-app IEBC
verification screen, the identification number entered there is submitted to the
Independent Electoral and Boundaries Commission's own public verification service
(verify.iebc.or.ke) and is handled under that service's terms. No other
data is sent there.
Data retention and deletion
Records synced to the backend are retained by the Campaign for as long as needed for its operations and applicable legal requirements. Uninstalling the App removes all locally queued data from the device. To request deletion of records held about you, contact the Campaign that collected them.
Your rights
Under Kenya's Data Protection Act, 2019 (and any other applicable law), data subjects have rights of access, correction, and deletion regarding their personal data. Exercise these rights by contacting the Campaign acting as data controller.
Permissions summary
| Permission | Why it is used |
|---|---|
| Internet | Sync data with the CCTS backend |
| Precise & approximate location | Proof-of-location stamp on field submissions only |
| Camera | Capture incident/evidence photos when the agent chooses |
Changes to this policy
We may update this policy; the "Last updated" date above will change accordingly.
Contact
For questions about the App, contact the issuing campaign administrator, or the CCTS operator at the address published alongside this policy.