Privacy Policy

1. Introduction

This Privacy Policy explains how AVE Africa collects, uses, stores, shares and protects personal data when you interact with our Motor Claims Management Platform, mobile applications, and related services. By using our services, you acknowledge that you have read and understood this Policy.

2. Roles and Responsibilities

AVE Africa may act as a Data Controller or Data Processor depending on the service arrangement. Where we process data on behalf of an insurer or organisation, we do so under a Data Processing Agreement that governs the rights and obligations of each party.

3. Categories of Personal Data

We may process the following categories of personal data:

• Identity information (name, national ID, date of birth)
• Contact information (phone number, email address, physical address)
• Vehicle and policy details (registration, make, model, policy number)
• Claims documentation and correspondence
• Media files (photographs, videos, documents)
• Geolocation data collected during claims submission or assessment
• Technical information (device identifiers, IP address, usage logs)

4. Sources of Information

Data may be collected directly from users, insurers, brokers, assessors, repairers, suppliers, connected devices, and integrated third-party systems such as government registries or verification services.

5. Purposes of Processing

We process personal data to:

• Administer claims and manage related workflows
• Prevent, detect and investigate fraud and other unlawful activities
• Monitor and improve platform performance and analytics
• Comply with legal and regulatory obligations
• Provide customer and technical support

6. Legal Basis for Processing

Processing is carried out on one or more of the following legal bases: consent of the data subject, performance of a contract, compliance with a legal obligation, or legitimate interests pursued by AVE Africa or a third party where such interests are not overridden by the data subject's rights.

7. Data Sharing

Personal data may be shared with insurers, reinsurers, regulatory authorities, fraud investigators, repairers, assessors, suppliers, and technology service providers — strictly as required to deliver the services and subject to appropriate confidentiality and data processing agreements.

8. AI-Assisted Services and Third-Party AI Providers

Our applications offer an optional AI-powered claims assistant ("AVE Assistant") that helps you report an accident and file a claim through a conversation. The assistant is powered by Claude, an artificial-intelligence service provided by Anthropic PBC (United States). When you choose to use the assistant, the following data is transmitted to Anthropic through AVE Africa's servers:

• The content of your chat messages, including your name and any claim details you provide (such as policy, vehicle, and accident information)
• Photos of the accident or vehicle damage that you attach during the conversation
• Your device's location coordinates, only where you have granted the location permission

This data is collected directly from you within the conversation (and, for location, from your device with your permission) and is used solely to guide the claim-filing conversation, validate submitted evidence, and complete your claim submission. It is not used for advertising. Anthropic processes this data as a service provider under a data processing agreement that provides protection equal to that described in this policy, and does not use it to train its models.

Use of the AI assistant is optional and requires your explicit in-app consent before any data is shared. You may decline and file your claim through the standard claim form instead, with no loss of service.

9. International Transfers

Where personal data is transferred outside Kenya, AVE Africa shall ensure such transfers are protected through lawful and adequate safeguards in accordance with the Kenya Data Protection Act and other applicable legislation.

10. Data Retention

Retention periods are determined by legal, regulatory, and legitimate business requirements. Data is securely deleted or anonymised once the applicable retention period has expired. Retention schedules are documented and reviewed regularly.

11. Security Measures

We implement appropriate technical and organisational security measures including:

• Encryption of data in transit and at rest
• Multi-factor authentication (MFA)
• Role-based access controls
• Comprehensive audit logging
• Regular automated backups
• Ongoing vulnerability management and penetration testing

12. Data Subject Rights

Data subjects have the following rights under applicable law:

• Access — obtain a copy of your personal data
• Correction — rectify inaccurate or incomplete data
• Deletion — request erasure where no lawful basis for retention exists
• Restriction — limit processing in certain circumstances
• Portability — receive data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests

Requests should be submitted to our Data Protection Officer at info@aveafrica.com.

13. Automated Processing

Any automated fraud screening or workflow decisions are subject to appropriate human oversight. Data subjects may request a manual review of any automated decision that significantly affects their interests.

14. Cookies and Tracking Technologies

Our web portal may use cookies and analytics technologies to improve user experience and understand platform usage. You may manage cookie preferences through your browser settings. Disabling cookies may affect certain platform features.

15. Children's Privacy

The AVE Africa platform is not intended for use by persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor's data has been submitted without consent, please contact us immediately.

16. Data Breach Management

AVE Africa maintains documented incident response and breach notification procedures. In the event of a personal data breach, affected parties and relevant supervisory authorities will be notified within the timeframes required by applicable law.

17. Changes to this Policy

We may update this Privacy Policy from time to time. The latest version will be published on this page and through the application. Continued use of the platform after any updates constitutes your acceptance of the revised Policy.

18. Contact and Complaints

For privacy-related enquiries or to exercise your rights, contact AVE Africa's Data Protection Officer:

You may also lodge a complaint with the Office of the Data Protection Commissioner of Kenya or the relevant supervisory authority in your jurisdiction.