You agree to the terms of service below, and the Terms of Use for Substack, the technology provider.

At Update Newsroom, we understand that your trust is our most valuable asset. Our Privacy Policy is designed to comply with Kenya’s Data Protection Act of 2019 while maintaining the highest global standards for investigative journalism. We operate on a principle of Data Minimization, meaning we only collect the information absolutely necessary to deliver the news or protect a source. Unlike traditional media outlets that track every click for advertising, our systems are built to prioritize your anonymity and digital safety.

How We Handle Your Information

We distinguish between two types of users: our general readers and our confidential sources. For general readers, we collect minimal technical data—such as your email address for newsletter delivery—which is stored in encrypted databases. We do not sell your personal information to third-party marketers. For our confidential sources, we go several steps further. We encourage the use of encrypted platforms like Signal that do not store metadata, ensuring that even if our servers were compromised, there would be no digital “paper trail” linking your identity to the “raw” stories you provide.

Data Retention and Your Rights

We do not believe in permanent digital footprints. Our policy is to retain personal data only for as long as it serves its specific purpose whether that is a 30-day investigation window or the duration of your active subscription. Under the law, you have the Right to Erasure (the “right to be forgotten”), meaning you can request the permanent deletion of your data at any time. We also conduct regular Data Protection Impact Assessments to identify and mitigate risks before they affect our community, ensuring that our “clear-eyed” look at the world never comes at the cost of your personal security.