Privacy Policy

KiliAventure ("we", "our", or "the Platform") operates a community and information hub dedicated to Mount Kilimanjaro climbers, porters, and certified tour guides. We are committed to processing your personal data transparently, securely, and in full compliance with international data protection laws including the General Data Protection Regulation (GDPR).

Depending on how you use KiliAventure, we collect the following categories of information:

• Account Credentials: Username, email address, password hash, and member role (Mountain Climber or Certified Tour Guide).
• Profile Information: Optional display name, climber biography, mountain experience, avatar image, and target routes.
• Tour Guide Verification Data: For registered guides, licensing identifiers, certifications (e.g., Wilderness First Responder, TANAPA park registration), and tour operator affiliations submitted for verification badges.
• Public Community Contributions: Forum discussion threads, questions, answers, gear feedback, route logs, and upvotes/likes.
• Technical Log Data: IP address, browser user-agent string, session timestamps, and error diagnostics collected to safeguard against unauthorized access and abuse.

We process your personal information strictly for legitimate operational purposes:

• To provide access to our interactive discussion boards, route advice archives, and member profiles.
• To review and issue verified Certified Tour Guide credentials, maintaining high safety and ethical standards for climbers.
• To notify you about replies to your expedition questions, mentions, and important summit preparation updates.
• To detect and eliminate spam, abusive content, fraudulent registrations, and unauthorized automated activity.

KiliAventure uses minimal, privacy-respecting storage mechanisms:

We implement industry-standard technical and organizational security measures, including HTTPS encryption in transit, bcrypt password hashing, and role-based access control. We retain your account data for as long as your account remains active or as required by applicable administrative and legal obligations.

You maintain full control over your personal data under global data protection laws, including the right to:

• Access & Export: Request a digital copy of all personal information we hold about you.
• Rectification: Edit and update your profile bio, route goals, and email in your Account Settings.
• Erasure (Right to Be Forgotten): Request the permanent deletion or anonymization of your account and personal identifiers.
• Withdraw Consent: Opt out of non-essential email notifications and updates at any time.

If you have any questions, requests regarding your personal data, or wish to exercise your privacy rights, please contact our Data Protection Officer: