Privacy Policy

Who is responsible for your data

AssessPro is provided as software to assessing firms. The firm that instructs you, employs you, or holds the claim file is the data controller — it decides what goes into a file and how long it is kept. We operate the software and its servers on that firm’s behalf, which makes us the data processor.

If your details appear in a claim file and you want them corrected or removed, the assessing firm handling your claim is the right first contact. If you cannot reach them, write to us at surgbc@gmail.com and we will help you find them.

What the app records

About the people on a claim

A case file is a record of an incident, so it holds details about the people involved — not only the person using the app:

• Names of the insured, drivers, third parties and witnesses
• Phone numbers, email addresses and postal addresses
• National ID numbers, where an assessor records one
• Statements — what a person says happened, and a summary of it
• Vehicle details: registration, make, model, year, and the policy and claim numbers
• Where and when the incident happened, and a description of it

Photographs and documents

Assessors attach photographs of damage and scanned documents (police abstracts, quotations, reports). These are taken with the camera or chosen from the phone’s gallery, and only when the assessor chooses to attach one.

Location

The app asks for location only to place a branch office on a map when the firm sets one up — you tap the map, or use your current position to save typing. It does not track an assessor’s movements, and it does not record location in the background.

Your account

Your email address, and the email addresses of accounts you have signed in with on that device so you can pick between them.

What stays on your phone and never reaches us

• Fingerprint and face unlock. If you switch on biometric unlock, the check happens entirely on the device using Android’s hardware keystore. Your fingerprint never leaves the phone and is never sent to us — Android does not make it available to apps in the first place.
• Your session. Sign-in tokens are held in encrypted storage on the device.

AssessPro also switches off Android’s automatic backup. That means app data is not copied into your personal Google Drive, and is not carried across in a device-to-device transfer. Case files live on the server, not in a personal cloud account.

Where it is stored

Case data is sent to and stored on the AssessPro server at https://assesspro-app.cseco.co.ke, over an encrypted HTTPS connection. Access is restricted by role: an assessor sees the files of the branch they work in, and signing off a report requires senior rights.

What we do not do

• We do not sell your data.
• We do not share it with advertisers, data brokers or analytics networks.
• There is no advertising in the app.
• We do not use claim data to build profiles or train models.

Data is disclosed outside the firm only where the law requires it — for example a court order — or where the firm itself instructs us to, such as sending a completed report to the insurer who commissioned it.

Why the app asks for each permission

• Camera — photographing damage and documents on site. Optional: you can attach from the gallery instead.
• Location — pinning a branch office on the map. Used when you tap that button, not continuously.
• Biometrics — locking the app behind your fingerprint or device unlock. On-device only.
• Internet and network state — reaching the server.

How long it is kept

A claim file is a business record, and the assessing firm decides how long it needs to keep one — insurers and regulators generally require several years. We keep data for as long as the firm’s account is active, and delete it on the firm’s instruction.

Deleting your account

You can delete your own account from the app or by writing to us. Deletion starts a short grace period during which signing in again restores the account; after that the record is scrubbed and the email address is freed.

Deleting your account does not delete the claim files your firm holds — those belong to the firm as the controller, and it may be legally required to keep them.

Your rights

Under Kenya’s Data Protection Act 2019 you may ask to see the personal data held about you, have it corrected if it is wrong, have it erased where there is no lawful reason to keep it, and object to how it is being used. Address these to the assessing firm handling your claim; we support them in answering.

Children

AssessPro is workplace software for assessing firms and is not directed at children. A child’s details may appear in a file only where they were involved in an incident, recorded by the firm as part of its claim.

Changes to this policy

If what the app collects changes, this page changes with it and the date at the top moves.

Contact

Questions about this policy or about data held in AssessPro: surgbc@gmail.com, Nairobi, Kenya.