Viglant Go
Log in
Menu

Privacy Policy

Last updated: 1 November 2026

1. Who we are

Viglant Go is run by [Company legal name], based in Kenya ("Viglant", "we", "us"). It helps people working or planning to work abroad check job offers, keep their documents safe, stay safe while travelling and get help when something goes wrong.

This policy covers the Viglant Go Android app, the web app at app.viglantgo.com and this website. We handle personal data under the Kenya Data Protection Act, 2019, and we are the data controller.

2. Information we collect

What Examples When
Account Name, phone number, password (stored hashed), language, email if you give it, gender if you choose to give it, and when you accepted our terms When you sign up or edit your profile
Your migration Where you are in your migration, whether you have worked abroad before, and past jobs abroad you write down When you answer or add them
Job checks Job, destination, agency, employer and agent names, what you were promised, your contacts with them, and the documents, photos and recordings you add When you check a job offer
My documents Copies of your passport, ID, visa, contract, tickets or certificates, and their expiry dates When you save them
Journey and journal Departure and arrival check-ins, who is collecting you (including a photo, if you add one), notes, mood, photos and voice notes, and how your job compares with what was promised When you use My journey
Help requests and case files What happened, voice notes, documents, and witnesses you name. This may include health, abuse or other very personal details When you ask for help or report something
Emergency alerts Your message, the time, and your location if it is available When you send an alert (see section 4)
Safety settings Your choices for emergency features, set before you travel When you set them up
Other people's details Trusted contacts' names and numbers, witnesses, the person collecting you, and someone who pays for you When you add them. Please tell them first
Payments M-Pesa phone number, amount, reference and status. We never see your M-Pesa PIN When you or someone else pays
Device and security Push notification token, device name, IP address, browser or device type, and a log of actions on your account When you use the service

Gender is optional and never changes a job check's risk result. It can only add context to a warning.

3. How we use it

  • Checking job offers. Software scores an offer against contract rules, Kenya's National Employment Authority (NEA) licence register and the evidence you give. A reviewer then checks it and decides what you see.
  • Keeping you safe. We pass your alerts to our safeguarding team and your emergency contacts, and warn you about danger in the country you are going to.
  • Spotting danger. Software looks for danger words (such as a passport being taken, or threats) in your help requests and journal notes, so our team can see them quickly. A person always decides what happens next. Nobody outside our team is contacted because of this.
  • Helping you. Our team uses your case file to contact you and, where needed, others who can help.
  • Running your account. We verify your phone by text, keep you signed in, process payments and send notifications, such as a job check result or a document about to expire.
  • Protecting other workers. We look for patterns across job checks, such as many people reporting one agency, and warn others about companies. We do not publish anything that identifies you. Brokers and agents, who are individuals, are never listed in our public search.
  • Improving the service and security. We count how often each help guide is opened, by guide and country only, and we keep logs to prevent misuse.

We rely on your consent, on the need to provide the service you asked for, on protecting your life or someone else's in an emergency, on our legitimate interests in keeping the service safe, and on our legal duties. Some of this information is sensitive personal data under the Act, and we use it only for the purposes above.

4. Location

We use your location only in these cases:

  • SOS. Once, when you send an alert. It goes to our safeguarding team and your emergency contacts. SOS still works without location.
  • Scam-centre alert. After you send this alert, the app sends your location to our safeguarding team every 15 minutes for up to 3 days, or until your case is resolved. If you allowed location "all the time" in Android, this continues when the app is closed. It is not used at any other time. We delete these locations 30 days after your case closes.
  • Airport meet-up. If you open a meet-up, you can choose to show where you are to the person you send the link to. They will see that you use Viglant Go. We keep only the latest position and wipe it when you meet, cancel, or after 3 hours.
  • Danger zones. The "Am I near this?" check happens on your phone. That location is not sent to us.
  • Near me. On the web app, when you ask to find help close to you.

5. Who we share it with

  • Your emergency contacts receive a text with your alert and location. If the server cannot send it, your phone's SMS app opens so you can send it yourself.
  • People you share job checks with see how each check stands, never your documents or journal. You choose for how long and can stop at any time.
  • Whoever you send a meet-up link to (see section 4).
  • Those who can help with your case. Our team may share what is needed with a Kenyan embassy or consulate, NEA, the police, other authorities in Kenya or the country you are in, or a support organisation. In a scam-centre case this can include your location trail. In rare cases, and with care, it can include the agency that recruited you. Nothing is sent automatically, and each referral is recorded. You can also ask for an item to be taken out of your case file while the case is open.
  • Service providers who may use data only to provide their service to us:
    • Onfon Media, for text messages
    • Safaricom (M-Pesa), for payments
    • Google Firebase Cloud Messaging, for notifications
    • DigitalOcean, for servers, database and file storage
    • Our email provider, for messages you send through this website
    • Brave Search, which receives only company names and countries, to help reviewers research a company
  • The law. When a court order or law requires it, or to protect someone's life.

We do not sell your data, and we do not use advertising or analytics trackers.

Private by default. Items in My documents are private to you unless you send a copy to a job check or help request, and then only that copy is shared. Journal photos and voice notes can be opened only by you.

6. Data stored outside Kenya

Our servers are outside Kenya, in Europe, and some service providers work internationally. Referrals may also go to authorities in the country you are in. We transfer data only as needed for the purposes in this policy, with safeguards such as encrypted connections and limits on what providers may do with it.

7. App permissions

Permission Why
Location, including "all the time" if you allow it The uses in section 4
Microphone Only while you record a voice note
Notifications Job check results, safety alerts and reminders
Internet Sending and receiving your data

The app does not read your contact list. When you choose a contact, it receives only the one you pick. Photos are taken through your camera app, and document scanning runs through Google Play services on your phone. Fingerprint unlock stays on your phone, and we never receive it. You can turn permissions off in your phone's settings at any time.

8. How we protect it

  • Data travels over encrypted connections (HTTPS).
  • Passwords are stored hashed, never in plain text.
  • The app's data on your phone is encrypted and locked with your PIN or fingerprint. It is not included in phone backups.
  • The app blocks screenshots of its screens.
  • Downloading your data, deleting your account and seeing checks shared with you all need a code texted to your phone.
  • Only staff who need your information can see it, and staff access is logged.

No system is perfectly secure. If a breach puts you at risk, we will tell you and the Data Commissioner as the law requires.

9. How long we keep it

We keep your information while your account is open.

When you delete your account, your account, job checks, documents, journey and journal, help requests and case files, alerts, trusted contacts and subscriptions are deleted straight away, and you are signed out of every phone. Backups, and requests made by email, are cleared within [30] days.

There are two exceptions:

  • Open safety cases. If our safeguarding team has an open case for you, your account is closed and signed out straight away, but your data is kept until the case closes, and then deleted. We do this because someone may be forced to delete their account, and the case may be how they get help. Location updates stop when your account is closed.
  • Payments. We keep completed payment records (amount, date, plan and M-Pesa reference) for as long as tax law requires, without your name or phone number.

We cannot recall information already passed to an embassy, authority or support organisation. Our security log, which holds entries of actions on your account with IP address and device type, is kept for 12 months, including the record of your deletion. Information about agencies and employers that does not identify you may be kept to warn other workers.

10. Your rights

You have the right to be told how your data is used, and to:

  • Get a copy. In the app, go to My data → Download a copy for a ZIP of what you have given us, including your documents.
  • Correct it. Edit your profile or ask us.
  • Delete it. In the app, go to My data → Delete my account, or use https://app.viglantgo.com/delete-account. If you cannot sign in, email [privacy@yourdomain] with the phone number on your account.
  • Withdraw consent or object. Stop sharing, remove contacts, or turn off notifications and location at any time. This does not affect what was done before.
  • Ask for a person to review a decision. Every job check result is reviewed by a person. Ask us if you disagree with yours.
  • Complain. Contact us first. You can also complain to the Office of the Data Protection Commissioner, Kenya, at www.odpc.go.ke.

11. This website

The website has no account system. When you use it:

  • Contact form. Your name, email and message are emailed to our team.
  • Comments. We store your name, email and comment. After a moderator approves it, your name and comment appear publicly. Your email does not.
  • Likes. To count one like per visitor, we store a code made from your IP address and a cookie. We cannot read your IP address back from it.
  • Cookies. We use a session cookie and a security cookie, which keep the site working, and the vg_fp cookie for likes, which lasts one year. We use no advertising or analytics cookies.
  • Server logs. Our servers keep IP addresses and pages requested, to run and protect the site.

To have a comment or message removed, contact us.

12. Children

Viglant Go is for adults looking for work abroad. It is not meant for anyone under 18, and we do not knowingly collect children's data. If you believe a child has given us data, contact us and we will delete it.

13. Changes

We will change the date on this page when we update this policy and, for important changes, tell you in the app before they take effect.

14. Contact us

  • Company: [Company legal name]
  • Address: [Postal address], Nairobi, Kenya
  • Email: [privacy@yourdomain]
  • Phone: [Support phone number]