Privacy policy

Last updated: 8 October 2026

This is how Nipe Sifa handles your data, in plain words. Short version: we ask for very little, we never sell it, and you can delete your profile any time.

Who we are

Nipe Sifa is run by Hekima Labs, S.L., a Spanish sole-member limited company (sociedad limitada unipersonal), tax ID B26960278, registered office in Madrid, Spain, registered in the Madrid Commercial Registry (Registro Mercantil de Madrid). We decide how your data is used (we are the "data controller").

Questions or requests about your data: contacto@hekimalabs.com.

What we collect

  • When you create your link: your name, your university or college, what you study, the background you pick, and that you told us you are 18 or older.
  • Compliments: which phrase was sent, to whom and when, and when it was read, notified or had its hint opened. Phrases come from our list; nobody can write free text.
  • Compliments sent by someone you blocked are kept hidden: you never see them.
  • Hints, blocks and reports you make from your inbox, and our notes when we handle a report.
  • When you last used your inbox, your link page or sent a compliment.
  • If you turn on notifications: an address and keys your browser gives us to deliver them. No phone number.
  • If you join student deals: your WhatsApp number, the exact consent text you accepted, its version and date, the ID of your WhatsApp message, the offers we send you, and if you stop, when and how. We read your WhatsApp message to sign you up, but we do not keep its text.
  • When anyone opens a link, with or without a profile: a code made from an anonymous cookie, to count visits (see Cookies).
  • To stop abuse: a scrambled code made from your internet address. It cannot be turned back into the address and is kept about a day.
  • Records of how the service is used (for example "link created", "compliment sent"), linked to your profile.

What we never ask for

Your contacts, your location, your photos, or your phone number (except your WhatsApp number, and only if you join student deals). We do not check documents: you tell us you are 18 or older.

Why we use it

  • To run the service you asked for: your link, your inbox, hints and notifications.
  • To keep people safe: daily limits, blocks, reports, and stopping abuse.
  • To send you student offers and promotions on WhatsApp, only if you ticked the box and confirmed from your WhatsApp. You can stop any time.
  • To understand how the service is used and improve it.

Who sees what

  • Anyone with your link sees your name and your background, also in the preview image WhatsApp shows when the link is shared.
  • When you send a compliment, the person can ask for a hint: your campus and what you study. Never your name. If fewer than 10 people share your campus and field, they only see the campus. If you chose "Other" as campus, no hint is given.
  • In your inbox you see how many times people opened your link (each person once a day), never who.
  • Brands never get your number or any of your data. Offers are sent by us, in our name.
  • We never sell your data.

Companies that help us

They only handle your data to provide their service to us:

  • Supabase: our database, in the European Union (Ireland).
  • Vercel: hosts and runs the website, and keeps short technical logs (internet address, browser, pages opened).
  • Twilio and Meta (WhatsApp): only for student deals.
  • Google, Apple, Mozilla or Microsoft: deliver browser notifications, depending on your phone.

Where your data is

Our database is in the European Union (Ireland). Our providers (Vercel, Twilio, Meta and the notification services) may process data in other countries, including the United States. Moving data out of Kenya is done with the safeguards the Kenyan Data Protection Act requires.

How long we keep it

  • Compliments, including hidden ones: 12 months.
  • Your profile: deleted after 12 months without opening your inbox or your link page, or sending a compliment. Your inbox, blocks, visit counts and notification settings go with it.
  • Usage records and visit counts: 24 months. Usage records stop being linked to you when your profile is deleted.
  • Blocks: until either profile is deleted. Reports: until the reported compliment or profile is deleted.
  • Student deals: while you are signed up, and 3 years after you stop, as proof that you agreed and then stopped. Sign-ups never finished on WhatsApp: 24 hours. WhatsApp message IDs used to avoid double processing: 30 days.
  • Anti-abuse codes: about a day.

Cookies

We use two small cookies. No advertising cookies, no tracking across other sites.

  • Your link key: needed to keep your link and inbox on this phone. It lasts up to 400 days, or until you delete your link.
  • Visit counter: an anonymous code used only to count visits, so each person counts once a day. It expires at midnight Kenya time. What we store for each link cannot be matched to other links.

Your rights

You can ask to see, correct or delete your data, object to how we use it, or withdraw your consent:

  • "Delete my link" in your inbox erases your profile, your inbox, your blocks, your visit counts and your notification settings. Compliments you sent stay until they expire (12 months), without anything that identifies you.
  • Stop student deals: reply STOP on WhatsApp, or use the link we sent you when you joined. To stop and also have your deals record erased, write to us.
  • Anything else: write to contacto@hekimalabs.com.
  • If you are not happy with our answer, you can complain to the Office of the Data Protection Commissioner of Kenya, or to the Spanish Data Protection Agency (AEPD).

18 and over only

Nipe Sifa is only for people aged 18 and over. You tell us your age; we do not check documents. If we learn that someone is younger, we delete their profile.

Changes

If we change this policy, we will update the date above. If the change is important, we will tell you on the site.