Privacy Policy
Last updated: 23 September 2026
This policy explains how Rylgam handles your personal data when you visit rlgymapi.com or join the waitlist.
Who we are
Rylgam is operated by Alex Odhiambo Haya, an individual based in Nairobi, Kenya, who is the data controller for the personal data described here.
Contact for anything about your data: privacy@rlgymapi.com
What we collect
When you join the waitlist, we collect:
- your email address,
- which form on the site you used,
- the date and time you signed up.
We do not ask for your name, and we do not collect any other information about you through the form.
What we do not collect
- We do not use cookies, analytics, advertising or tracking scripts.
- We do not store your IP address. To prevent abuse of the form, we keep a one-way, salted code derived from it for a short rate-limiting window. That code cannot be turned back into your IP address, and its salt changes every day.
Why we use it
We use your email address only to contact you about early access to Rylgam and about its launch. We do not sell, rent or share your email address with anyone for their own marketing.
Our legal basis is your consent, given when you submit the form. You can withdraw consent at any time (see "Your rights").
Who processes it for us
The site and the waitlist database are hosted by Cloudflare, Inc., which processes the data on our behalf under its data processing terms. Cloudflare may also process technical data, such as IP addresses, in its network to deliver and secure the site. Cloudflare operates globally, so your data may be processed outside your country, including in the United States. Where this applies, the transfer is covered by Cloudflare's data processing addendum, which includes the European Commission's Standard Contractual Clauses.
How long we keep it
We keep your email address until you ask us to delete it, or until 24 months after you signed up if Rylgam has not contacted you about access by then, whichever comes first. Rate-limiting codes are deleted when their window ends.
Your rights
Depending on where you live, including under Kenya's Data Protection Act, 2019 and the EU and UK GDPR, you can:
- ask for a copy of the data we hold about you,
- ask us to correct it,
- ask us to delete it,
- withdraw your consent at any time,
- object to how we use it.
Email privacy@rlgymapi.com from the address you signed up with. We will act within 30 days.
You can also complain to a data protection authority. In Kenya, this is the Office of the Data Protection Commissioner (odpc.go.ke). If you are elsewhere, you can contact your local authority.
Children
Rylgam is a professional tool, and the waitlist is not intended for anyone under 18.
Security
Data is sent over encrypted connections (HTTPS) and stored in a database that only the operator can access.
Changes to this policy
If we change this policy, we will update the date at the top. If a change affects how we use your email address, we will tell you by email before it takes effect.