UNCHORUNCHOR OS Government and Law Enforcement Request Policy
Version 2026-10-23. Effective 23 October 2026.
This policy explains how SyncPesa Technologies Limited responds when a government agency, a court, a regulator or a law-enforcement authority asks for information about people or organisations who use UNCHOR OS. It applies to every request, from every country.
1. Principles
- Legal process is required. We disclose information only when a valid, legally binding order, warrant, subpoena or statutory demand that applies to us requires it. Informal requests are declined.
- Narrow requests only. We disclose only the specific information the legal process requires. We challenge or narrow requests that are unclear, excessive or not properly issued.
- No backdoors. UNCHOR OS has no hidden access, no master account and no way for anyone, including us, to read the content of people's traffic. We never record the websites customers visit, their DNS queries or the content of their communications, so we cannot disclose them.
- Notice to the people concerned. We tell the account holder before disclosing their information, so they can seek legal advice, unless the law forbids it or a court orders otherwise, or telling them would create a risk to someone's life. When a ban on notice ends, we notify them then.
- Customer data belongs to our customers. When a request concerns data that an UNCHOR OS customer controls (such as the records of a Wi-Fi network's own customers), we refer the authority to that customer, unless the law requires us to answer directly.
2. What information exists
We may hold: account details (name, email), workspace and billing records, sign-in records (times, network addresses, browser), the operator warranties a site gave, payment records of a site (amount, time, provider reference, masked phone numbers after the retention period), and the audit log of changes. What exists for a given account depends on how it was configured and on retention periods described in the Privacy Notice.
3. How we handle a request
- The authority sends the request to the contact form at https://unchor.co.ke/contact (topic: Legal), on official letterhead, naming the authority, the legal basis, the specific accounts or records, and a contact for verification.
- We verify the authority independently, using contact details we find ourselves, not those in the request.
- Two people review every request: a person responsible for legal matters and a second person, neither of whom may approve their own access. Access to the records is granted for that request only, for a limited time, and is recorded in the audit log.
- We disclose through a secure channel, keep a copy of the request and of what we disclosed, and delete working copies when the matter ends.
4. Emergencies
If we believe in good faith that a disclosure is necessary to prevent an imminent risk of death or serious physical harm, we may disclose the minimum information needed without waiting for legal process. We record the reasons and review every emergency disclosure afterwards.
5. Requests from other countries
Authorities outside Kenya must use the international legal channels that apply, such as a mutual legal assistance treaty, unless a law that binds us requires otherwise.
6. Transparency
We publish the number of requests we receive, and how many we answered in full, in part or not at all, at least once a year, to the extent the law allows.