This policy covers Leo (news, markets and the Wire), Leo Events and this website, leo.africa. It describes what each one actually does today, and where the two apps differ, it says so.
The short version
- Leo Events collects nothing that identifies you. It has no accounts, sends no identifier, and keeps your saved events and reminders on your phone.
- Leo works without an account. Without one it sends a random install number with each request, so we can apply fair-use limits and keep the service running. With an account it also keeps your email address and the lists you choose to keep on it.
- Questions you ask Ask Leo are sent to Anthropic to write the answer, and we keep them for 30 days.
- We don’t show ads, sell data or use analytics, advertising or crash-reporting services in either app.
- Our servers are in the United States. You can ask to see, correct or delete your data at any time.
Who we are
Leo, Leo Events and leo.africa are run by Jenga Systems Ltd of Nairobi, Kenya (“we”, “us”). We decide how your data is used and are responsible for it — the data controller under Kenya’s Data Protection Act, 2019. You can reach us at info@leo.africa.
Leo Events
What leaves your phone
To show you what’s on, Leo Events asks our server for listings. Each request carries the filters you chose (country, day, category or a search), your phone’s time-zone offset so that dates fall on the right day and, for events you’ve saved, their listing numbers, so the app can tell you if a seller cancels or re-lists one. None of it is tied to you: the app has no account, and it doesn’t create or send any identifier.
What stays on your phone
The events you save (with a copy of their details, so your list works offline), the reminders you set, the categories you follow and the country you chose. They are never uploaded. Uninstalling the app deletes them.
Reminders
A reminder is scheduled and delivered by your own phone — the day before an event and again a few hours before it starts. Nothing about it is sent to us. The app asks for permission to notify you only when you first tap to be reminded.
Maps, flags and ticket sellers
- Where an event’s venue has published coordinates, the event page shows a map, drawn by Google Maps on Android and Apple Maps on iPhone. That software connects to Google or Apple to fetch the map, and their privacy policies apply (Google Privacy Policy). The app never asks for your location. Directions hands the venue to your phone’s maps app.
- Country flags load from flagcdn.com, which sees your IP address and the flag requested.
- Get tickets opens the seller’s own website inside the app. Anything you enter there, including payment details, goes to that seller under its own privacy policy. We never see it.
Leo
Without an account
Leo works without signing in. The first time it opens, it creates a random install number. It isn’t linked to your name, your phone number or your phone’s hardware. Leo sends it with each request, and we use it to:
- apply fair-use limits, such as three free Ask Leo questions a day;
- keep a usage record of what was requested from our server — the screen or story, the time and the result — for 90 days, to run the service, find faults and stop abuse. This means the record shows which stories, prices and shows were opened on that install. We don’t use it to profile you, and we don’t use it for advertising.
With an account
If you create an account, we keep your email address, your name if you give one, your country and a scrambled (hashed) form of your password — never the password itself. Your sign-in is kept in your phone’s secure storage and, on our server, as a session that lasts up to 90 days. When you’re signed in, the watchlist, follows, saved stories, price alerts and, for Leo Pro members, portfolio holdings you choose to keep are stored with your account, so they appear on every phone you use. Alerts in your inbox are kept for 90 days. You never need an account to read.
Ask Leo
When you ask a question, Leo sends it — with up to two of your earlier questions and their answers from the same conversation, and the news excerpts it found — to Anthropic, PBC, whose Claude model writes the answer. Anthropic receives no name, email address, install number or IP address from us. We keep each question and its answer, with your account or install number, for 30 days, to run the daily limit, look into problems and improve answers, and then they are deleted automatically. The conversation is also kept on your phone until you clear it.
Reporting an answer
If an Ask Leo answer is wrong, offensive or unsafe, you can report it from the answer itself. A report sends us the reason you picked, your question, the answer you were shown, the links to its sources and when it was written, with your account or install number — so a report is not anonymous, and it contains the text of the question and the answer. We use reports to find and correct bad answers and to stop misuse of the report button. They are deleted automatically after 90 days, including after an account is deleted.
Notifications
Leo may ask to send you notifications after you sign in or follow a podcast. If you allow it, your phone’s push token (an address for delivering notifications to that phone), its platform and the topics you chose are stored on our server. Notifications are delivered through Expo’s push service and Google’s or Apple’s notification systems. You can switch notifications off at any time in your phone’s settings.
What stays on your phone
Your preferences, your watchlist and saved items (also on your account if you’re signed in), the Ask Leo conversation, your listening progress and recently played stations, episodes you download (deleted after 30 days, 200 MB at most), recent screens kept for reading offline and — if the app crashes — a short technical note about the error, which is never uploaded. Signing out or deleting your account doesn’t remove these from the phone. Uninstalling the app, or clearing its storage, does.
Audio, pictures and articles
Podcast episodes and radio play directly from their publishers’ and broadcasters’ servers, and pictures load from the newsrooms’ own servers, so those servers see your IP address. Opening a story’s original page or a video shows the publisher’s site, inside the app or in your browser, under that publisher’s privacy policy.
Payments
Leo Pro is not on sale yet. When it is, it will be sold through the app store you downloaded Leo from, which handles your payment and tells us only that a purchase was made.
This website
leo.africa sets no cookies, runs no analytics and loads nothing from anyone else’s servers. If you choose a light or dark appearance, that choice is kept in your own browser only.
Server logs
Every request to our servers — from either app or this website — is logged with the IP address, the time and the address requested, including any search terms and filters. We use the logs to run the service, fix faults and protect it from abuse, for example by briefly blocking an address that repeatedly fails to sign in. The logs are kept for up to 14 days.
Who else receives data
| Recipient | What they receive | Why |
|---|---|---|
| Amazon Web Services (United States) | Everything stored on our servers | Hosting, in AWS’s North Virginia region |
| Anthropic, PBC (United States) | Ask Leo questions, up to two earlier questions and answers, and news excerpts | Writing Ask Leo’s answers |
| Expo (United States), Google and Apple | A push token and the notification’s text | Delivering Leo’s notifications, if you allow them |
| Google (Android) and Apple (iPhone) | Your IP address and the map area shown | Drawing a venue map in Leo Events |
| flagcdn.com | Your IP address and the flag requested | Country flags in Leo Events |
| Newsrooms, broadcasters, podcast hosts and ticket sellers | Your IP address, and whatever you enter on their sites | Serving the pictures, audio and pages you open |
We don’t sell personal data, and we don’t share it with advertisers or data brokers. Our service providers — Amazon Web Services, Anthropic, Expo, Google and Apple — may use what they receive only to provide their service, and must protect it at least as well as this policy does. Sites you open yourself, such as a newsroom’s or a ticket seller’s, are governed by their own policies.
Where your data is kept
Our servers are in the United States, and Anthropic, Expo and the map providers are also based outside Kenya, so your data is processed outside Kenya. We rely on our providers’ contractual commitments on security and confidentiality, as the Data Protection Act, 2019 requires for such transfers.
How long we keep it
| Data | How long |
|---|---|
| Account details | Until you delete the account |
| Lists kept on an account | Until you remove them or delete the account |
| Alerts inbox | 90 days |
| Sign-in sessions | Up to 90 days |
| Usage records by install number | 90 days |
| Ask Leo questions and answers | 30 days, including after an account is deleted |
| Ask Leo daily counts | 3 days |
| Ask Leo reports | 90 days, including after an account is deleted |
| Notification tokens | Until you delete your account, when they are unlinked from it and switched off |
| Server logs | Up to 14 days |
| Backups | Up to 35 days |
Our nightly backups hold a copy of the data above, so anything deleted leaves the backups within 35 days.
Your rights
Under Kenya’s Data Protection Act, 2019 you can ask to be told what we hold about you, to get a copy, to have it corrected or deleted, and to object to or restrict how we use it. Write to info@leo.africa from the email address on your account. Data held without an account is linked only to a random install number we can’t connect to you, so we can’t find it for you; it is deleted on the schedule above.
You can withdraw your consent at any time: switch notifications off in your phone’s settings, stop using Ask Leo, sign out, delete your account, or uninstall the app. If you’re unhappy with how we handle your data, you can complain to the Office of the Data Protection Commissioner.
Deleting your account
You can delete a Leo account in the app, or by writing to us. Deleting an account explains how, and exactly what is deleted.
Children
Leo and Leo Events are general-audience services and are not directed at children. We don’t knowingly create accounts for anyone under 18. If you believe a child has created a Leo account, write to us and we’ll delete it.
Security
Connections to our servers are encrypted. Passwords are stored only in hashed form, sign-in tokens sit in your phone’s secure storage, and our database can’t be reached from the internet. No system is perfectly secure: if a breach affects your data, we will tell you and the Data Commissioner as the law requires.
Changes
When this policy changes, we update the date at the top of this page. For significant changes, we’ll also say so on this site.
- 2 October 2026: added reporting an Ask Leo answer — what a report contains and how long we keep it.
Contact
Jenga Systems Ltd, Nairobi, Kenya — info@leo.africa.