Last updated 1 June 2026
Welcome to WYAT.
WYAT is an event discovery, ticketing, community, and social networking platform that enables users to discover events, purchase tickets, connect with communities, engage with organizers, and participate in experiences both online and offline.
This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you access or use the WYAT website, mobile applications, and related services (collectively, the “Platform”).
By creating an account or using WYAT, you agree to the practices described in this Privacy Policy. WYAT is intended for users aged 18 and over — see Section 17.
Information you provide directly
Information collected automatically
Event presence and activity.When you mark yourself Interested, Going, or “I'm Here” at an event, that status is recorded and may be visible to other users as a social-proof signal (see Section 7). This is more specific than general location data — it indicates your presence at a particular event at a particular time, not your continuous location.
General location. With your permission, WYAT may use general (not precise GPS-level) location information to recommend nearby events and improve event discovery. You can disable location access at any time in your device settings; doing so does not prevent you from using the Platform, only from location-based recommendations.
WYAT partners with trusted third-party payment providers — currently M-Pesa(via Safaricom's Daraja API) and Paystack. Payment credentials (M-Pesa PIN, card details) are entered directly with these providers and are never seen or stored by WYAT.
WYAT retains:
Because this includes financial data, it is treated as Sensitive Personal Data under Section 3 above and is never shared with organizers or other users.
We use your information to:
Events shown to you on WYAT (e.g. “Tonight near you,” “Trending”) are surfaced using straightforward criteria — event date, category, and your general location where permitted. WYAT does not currently use machine-learning-based personalization or build behavioral profiles to generate recommendations. If this changes in a future version of the Platform, this Policy will be updated before that feature ships.
WYAT includes social features that let users connect and interact. Information you choose to make public may be visible to other users, community members, event organizers, and Platform visitors, including:
You are responsible for the information you choose to share publicly. Private information (email, phone number, wallet balance, transaction history, MFA status) is never made public.
Users retain ownership of content they submit, upload, post, or share through WYAT. By posting content, you grant WYAT a non-exclusive, worldwide, royalty-free license to host, display, distribute, reproduce, and process that content solely for operating and improving the Platform.
WYAT may remove content that violates applicable law, infringes intellectual property rights, violates community guidelines, threatens user safety, or damages the integrity of the Platform.
WYAT does not give Organizers access to individual attendee data. Organizers never receive a list, export, or report of attendee names, phone numbers, email addresses, or any other personal data.
The only two ways an Organizer's experience touches attendee-level information at all:
Beyond this, the closest an Organizer gets to their attendees is the event's Community space, where they can post announcements visible to ticket holders — a one-way broadcast, not access to attendee data.
Organizers remain independently responsible for complying with applicable Kenyan data protection law with respect to whatever limited information described above does reach them.
Organizers may receive aggregated event insights — ticket sales figures, attendance counts, revenue — to help them understand event performance. These are aggregate numbers, not individual attendee profiles.
WYAT uses QR codes and ticket identifiers to validate tickets, prevent fraud, and facilitate entry. Verification records (who checked in, when) are retained for operational, security, and legal purposes.
WYAT's website may use cookies to maintain your session, remember preferences, analyze usage, and improve security. You can control cookie preferences through your browser settings; disabling essential cookies may prevent you from staying signed in.
WYAT does not sell personal information.
We may share information with:
Service providers who help us operate the Platform — payment processors (M-Pesa/Safaricom, Paystack), cloud hosting and database infrastructure (Supabase), error monitoring (Sentry), and similar operational vendors. These providers only receive the data needed to perform their function and are bound by their own security obligations.
Legal and regulatory authorities, where required by Kenyan law or reasonably necessary to comply with a legal obligation, protect user safety, prevent fraud, investigate violations, or protect WYAT's legal rights.
WYAT does not use third-party advertising.We do not display third-party or programmatic advertisements on the Platform, do not use ad-tracking technology, and do not share or sell personal data to advertisers or advertising networks. (This does not cover Organizer-purchased in-platform event promotion, such as boosted placement for their own events in Explore — that's WYAT's own first-party content, not third-party advertising, and doesn't involve sharing your personal data with anyone.)
WYAT applies reasonable technical and organizational safeguards, including encryption in transit, row-level access controls on all data (no user can read another user's private data at the database level), secure authentication (including optional multi-factor authentication), and activity monitoring for fraud detection.
No method of electronic transmission or storage is perfectly secure, and we cannot guarantee absolute security.
WYAT retains personal information only as long as reasonably necessary to provide the service, meet legal and financial recordkeeping obligations, resolve disputes, and prevent fraud. When information is no longer needed for these purposes, it is deleted or anonymized.
Under the Kenya Data Protection Act, 2019, you have the right to:
Account Deletion.You may request account deletion at any time via Settings or by contacting us. Some information may be retained where required for legal compliance, financial recordkeeping, fraud prevention, dispute resolution, or security investigations — we will tell you specifically what's retained and why if you ask.
WYAT is only for users aged 18 and older. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from someone under 18, we will delete it and close the associated account.
This is a firm requirement, not a recommendation — Kenyan law defines a “child” as anyone under 18 and requires a parent or guardian's consent before a child's personal data may be processed at all. Rather than build and maintain that consent machinery for a nightlife- and events-focused platform, WYAT restricts the Platform to adults only.
WYAT's infrastructure (database, hosting, error monitoring) may store or process data outside Kenya. Where this occurs, WYAT takes reasonable steps to ensure the receiving party provides an adequate level of protection consistent with the Data Protection Act, 2019's cross-border transfer requirements.
If WYAT is involved in a merger, acquisition, investment, restructuring, or sale of assets, personal information may transfer as part of that transaction, subject to the same protections described in this Policy.
WYAT is committed to complying with the Kenya Data Protection Act, 2019, and its associated Regulations.
Registration:WYAT's registration with the Office of the Data Protection Commissioner (ODPC) as a data controller/processor is currently in progress. This Policy will be updated with the registration number once issued.
Accountable contact: Until a dedicated Data Protection Officer is appointed, Ian Kariuki, Founder of WYAT, is personally accountable for data protection matters and can be reached at privacy@wyat.app. This role will transfer to a named Data Protection Officer as the team grows.
WYAT may update this Privacy Policy from time to time. Material changes will be communicated through the Platform, email, or other appropriate channels before they take effect. Continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.
Data Protection Contact: privacy@wyat.app
Support: support@wyat.app
Website: www.wyat.app
You may also lodge a complaint directly with the Office of the Data Protection Commissioner, Kenya, if you believe WYAT has not adequately addressed your concern.