Privacy Policy

Citizen's Eye is a GovTech transparency platform operated across the CEMAC region (Cameroon, Gabon, Congo, Chad, Central African Republic, Equatorial Guinea). This policy explains how we collect, use, and protect your data.

For registered users: name, email, role, region, and council. For anonymous whistleblower reports: report content only — no identity data, no IP address, no device fingerprint, no session tracking.

For project tracking: project details, milestones, budgets, contractor information, geo-tagged evidence photos, and audit logs.

All data is stored on sovereign infrastructure within CEMAC territory. No data is transferred to servers outside the CEMAC zone. No data is processed by external cloud providers, external AI services, or third-party analytics platforms.

All data is encrypted at rest using AES-256 and in transit using TLS 1.3. Decryption keys are owned by the client organisation, not by Citizen's Eye.

Anonymous reports use a zero-knowledge architecture. We do not store, log, or have any means of identifying the person who submitted a report. Metadata is stripped from uploaded files. No IP addresses are recorded. This is by design and cannot be overridden.

Personal data is retained for the duration of the user's account plus 24 months after deactivation, in compliance with ANPD guidelines. Project data and audit logs are retained permanently as part of the immutable public record.

You have the right to access, correct, or delete your personal data. You may request a copy of all data we hold about you. To exercise these rights, contact [email].

This platform complies with Law No. 2024/017 (Cameroon Data Protection), CEMAC banking regulations, OHADA business law, and GDPR for EU-funded projects. An automated Data Processing Register is maintained as required by the ANPD.

Data Protection Officer: [email]