Terms of Service

What HereMe is, and what it is not

HereMe replaces the paper visitor book. You carry a pass on your phone; at a gate you choose what to share with the host; the host keeps a record of your visit. People who meet through HereMe can stay in touch.

HereMe is operated by iTsitso Space LTD, a company incorporated in the Republic of Kenya. In these terms "HereMe", "we" and "us" mean that company, and "you" means the person using HereMe. HereMe is made up of:

• HereMe, the app for Android and iOS (space.itsitso.hereme);
• HereMe Gate, the Android app an organisation runs at its entrances (space.itsitso.hereme.gate);
• the web console at console.hereme.me, the lost-phone page at account.hereme.me, and hereme.me.

Who this agreement is between, and how you accept it

This agreement is between you and iTsitso Space LTD, about using HereMe. When you check in somewhere, the host's own rules for its premises are between you and the host.

You accept these terms, and the Privacy Policy, when you create your account: the app shows you both, and records which version you accepted and when. Opening this website or the app is not acceptance. When we change these terms in a way that matters, the app shows you the new version and asks you to accept it before you carry on (see Changes). An agreement accepted this way is valid in Kenya; you do not need to sign anything.

Your data, your choice

• Your data is yours. Your profile, your ID and passport details and the documents you keep in HereMe belong to you. HereMe keeps them encrypted, and iTsitso staff have no way to open them.
• You share only when you are at peace with it. Nothing leaves your account unless you choose it — item by item, for a person or host you name, for a purpose they must state. Your ID, passport and documents need your fresh confirmation every time.
• You can see what you shared. Every sharing from your vault, and every time a host opened a document you shared, is listed in your account.
• What you share becomes the host's copy. A host keeps what you shared for the period it showed you before you agreed — at most 7 days on HereMe. Deleting your data in HereMe does not delete a host's copy, but we pass your request to the host.
• We never sell your data, and we never use what you share with hosts for anything else.

The Privacy Policy sets out exactly what is held, for how long and who sees it. It forms part of this agreement.

Your account

• You must be 18 or over and able to enter into a contract. HereMe is not for children.
• One person, one account. An account belongs to a human being. Do not share it, sell it, or create one for someone else. Do not pretend to be anyone you are not.
• Be truthful. What you put in your profile and your vault should be true and yours. Hosts rely on it to know who is at their gate.
• Keep it safe. Keep your sign-in to yourself. You can turn on an app lock, see your devices and console browsers, and sign any console browser out from your phone. If you lose your phone, use account.hereme.me to sign out everywhere and erase HereMe from your devices — as the Privacy Policy explains, a phone that never reconnects cannot be erased.
• If you think someone else is using your account, sign out everywhere and tell us at support@hereme.me.

You are responsible for what happens on your account while it is in your hands. That is not a way of blaming you for our own security failure, or for what happens after you told us the account was taken and we had a reasonable chance to act.

Visiting a host

A host is a school, office, estate, business, household or other organisation that uses HereMe at its gate. When you check in:

• HereMe shows you the host, what it asks for, why, and how long it keeps it. You choose what to share. Your ID, passport and documents each need a fresh sign-in.
• What you share becomes the host's copy, kept under the host's policy: at most 7 days on HereMe, and longer only in an export the host keeps itself. The host, not HereMe, decides who may come in.
• A host may record that it trusts you (you are let in at once) or that it refuses you entry. That is the host's own decision and record; no other host sees it. If you think a refusal is wrong, ask the host; you can also ask us to pass a request to the host (see the Privacy Policy).
• Your pass works at gates that are offline. An offline gate learns of changes — a revoked pass, a refusal — when it next connects.
• At a ticketed event, the organisation may match your HereMe ID to its ticket. A ticket is checked in once, at a HereMe gate that is online.
• After a visit, a host may send you one short thank-you line. It is a service message, never an advertisement.

Do not check in for someone else, or let someone else use your pass.

Meeting people, and messages

Two people who meet can start a visit together: one scans the other's live pass, and the other confirms with one tap. Each chooses what to share with the other; it is kept for 7 days. The visit connects you.

• You can message only people you have met through a HereMe visit. Every message is end-to-end encrypted; HereMe cannot read it. The Privacy Policy explains its limits — including that reporting a message sends its text to us for review.
• You can block anyone. They are not told, cannot message you, and cannot start a visit with you. You can report a person or a message.
• Your messages and your record of visits live on your phone. HereMe keeps them for at most 7 days. If you lose your phone without a backup, they are lost; backups to your own Google Drive are optional and locked with a key only you hold — if you lose that key, nobody can open the backup, not even us.

Your vault

Your vault keeps your contact cards, IDs, passports, documents and your own items, with their photos, PDFs and recordings. You add, correct and delete them. They are encrypted, and iTsitso staff cannot open them.

You share from your vault one item at a time, for a host or person you name and a purpose they state. An ID photo you share is watermarked with the host, the date and the purpose before it leaves your phone. A shared copy is the recipient's, under their retention; deleting the item in your vault does not delete their copy, but you can ask them to, through HereMe.

Only put in your vault what is yours to hold. HereMe does not verify documents.

If you run an organisation

These terms apply to you as a person. If you create or run an organisation on HereMe — an institution or a household that receives visitors — you also agree to the following, on the organisation's behalf. We will publish separate Host Terms, with a full data-processing agreement, and ask organisation owners to accept them; until then this section governs.

You are the controller of your visitor book

• You decide the purpose of your visitor records (visitor management and the security of your premises) and what you ask visitors for. Ask only for what you need, and state a purpose for anything sensitive — HereMe shows it to the visitor word for word.
• You set how long records are kept: at most 7 days on HereMe, sensitive items no longer. HereMe then deletes them, after reminding your owners and admins every week. If you need records longer, export them; an export is your own copy, kept under your own policy and lawful basis.
• You decide which of your members may see, export or act on records, and you answer for what they do.
• Tell visitors. Display a notice at your entrance that you use HereMe, what you keep and for how long, and who to ask.
• Offer another way in for people who do not use HereMe, such as a manual entry at the gate.
• If you record that you trust or refuse a visitor, have a lawful and non-discriminatory reason, keep the reason factual, clear it when the reason ends, and answer the visitor's requests about it.
• You register your gate devices and are responsible for their physical security and for your guards' conduct. Guards are HereMe users acting for you, identified on your devices by a PIN, and bound by these terms.
• If you connect a ticketing system through HereMe's Event Integration API, that system works for you, not for us. HereMe sends it only the check-in state of the tickets it created; you can revoke its key at any time.
• Thank-you lines are one short service line, with no links and no promotion.

What we do for you, as your processor

• We process your visitor records only to run HereMe for you, and keep them confidential and secure.
• Our staff do not browse your records. They see visit details only under a support grant you issue.
• We use the providers listed in the Privacy Policy, and will tell you before we add one that touches your records.
• We help you answer visitors' requests about your records, and tell you without delay about a breach that affects them.
• A request from an authority for your records is sent to you, unless the law compels otherwise; we tell you unless the law forbids it.
• When your organisation leaves HereMe, you can export first; then your records are deleted.

Paid plans

HereMe is free to use today, and no payment is taken. When paid plans for organisations open, they will be bought in the web console — never inside the apps — and, in Kenya, paid by M-Pesa to iTsitso Space LTD's own Paybill, for iTsitso's own service. We will publish the plans, the prices and a cancellations and refunds policy before the first payment is taken, and an organisation will be able to cancel at any time, in any way that makes its meaning clear. Not paying will never be a reason to delete your data.

What is not allowed

Do not use HereMe to:

• use visitor data for anything other than managing visitors — no marketing, no selling, no profiling;
• share a host's visitor records with anyone outside that host, except as the law requires;
• get around a visitor's consent, or make someone share more than they chose to;
• check in for someone else, use another person's pass, or make fake or proxy check-ins;
• harass, threaten or abuse anyone — through messages, at a gate, or anywhere else;
• put spam, links or promotions in thank-you lines or messages;
• collect, scrape or guess HereMe IDs, codes or links, or build a list of people;
• pretend to be someone else, or put someone else's documents in your vault;
• break into, overload, copy or reverse-engineer HereMe, or test its security except by reporting to security@hereme.me;
• break the law.

Your content

What you put into HereMe — your photo, your vault, your messages — stays yours. You give us permission to store it, process it and show it only where the service needs to: your photo as your public card, a shared item to the host you shared it with, a hall entry to the people connected with you. The permission ends when you delete the content. We do not sell your content or license it to anyone.

You promise that what you upload is yours to upload. If someone tells us your content breaks the law or their rights, we may remove it while we look into it, and we will tell you.

Suspension, and leaving HereMe

You can stop using HereMe whenever you like and delete your account — in the app (Settings → Delete my account), at console.hereme.me/account/delete, or by writing to privacy@hereme.me. The deletion runs 14 days after you ask, and you can keep your account until then. The Privacy Policy says what is deleted and what is kept.

We may suspend or limit an account or an organisation where we reasonably believe it breaks this agreement, is used for fraud or abuse, puts other people or HereMe at risk, or where the law requires it. When we do:

• we tell you what we did and why, unless telling you would be unlawful or would defeat an investigation;
• you can appeal to support@hereme.me, and a person will look at it;
• we keep a suspension no wider and no longer than the problem needs.

An organisation that is suspended keeps its records until their retention ends; its gates pause check-ins.

Our responsibility, and its limits

We are responsible for HereMe working as described, for keeping your information as the Privacy Policy says, and for taking reasonable care in doing so.

What we never limit

Nothing in this agreement limits or excludes our liability for death or personal injury caused by our negligence; for fraud; for a breach of the Data Protection Act, including your right to compensation for damage and distress (s.65); for the warranty Kenyan law implies that a service we supply is of reasonably merchantable quality; or for anything else the law does not let us limit. HereMe is not supplied "as is": where Kenyan law gives you a right, it stands.

What we do limit

• We are not liable for loss that was not reasonably foreseeable, or for loss caused by something genuinely outside our control — a network outage, a provider's downtime, a phone that never reconnects — where we took reasonable steps.
• We do not promise that HereMe will never be interrupted, that every notification arrives at once, or that an offline gate is as up to date as an online one.
• We are not responsible for what a host or another person does with what you chose to share with them; they answer for their own use of it.
• If you use HereMe for an organisation, our total liability to the organisation for a claim is limited to what it paid us for HereMe in the twelve months before the claim, and the organisation covers us against claims arising from how it used visitor records. This does not apply to you as a consumer.

If we cannot agree

1. Tell us. Write to support@hereme.me, or privacy@hereme.me about your personal data. We reply within five working days.
2. Mediation, if you want it. Once a dispute has arisen, we may offer a neutral mediator; you are free to accept or refuse, and refusing costs you nothing.

Governing law

This agreement is governed by the law of Kenya, and the courts of Kenya have jurisdiction. That jurisdiction is not exclusive: if you are a consumer, you may also bring a claim where you live, and if the law where you live gives you rights that cannot be contracted away, you keep them.

Changes to these terms

HereMe will change, and so will these terms. Each version has a date, shown at the top, and the current one is always at this address. When a change matters to you, the app shows you the new version and asks you to accept it before you carry on; if you do not accept it, you can delete your account. A correction that does not affect your rights — a typo, a clearer sentence — only updates the date. If you want the version you accepted, ask legal@hereme.me.

Other things worth knowing

• If one part fails, it is cut out and the rest of the agreement stands.
• Not enforcing something is not giving it up.
• Your account is yours and cannot be transferred. An organisation can be handed to another member by its owner. We may transfer this agreement as part of a reorganisation or sale of our business, provided your rights are not reduced.
• Language. These terms are published in English. Where we publish a translation and the two differ, the English text governs as between businesses; if you are a consumer, you may rely on whichever version you actually read.

How to reach us

HereMe is operated by iTsitso Space LTD, a company incorporated in the Republic of Kenya. Our company number and registered office are not printed here yet; we would rather leave them off than print something that turns out to be wrong. Ask legal@hereme.me and we will give them to you, free of charge and by return.

• support@hereme.me — your account, or something that is not working.
• privacy@hereme.me — your personal data, access and deletion.
• legal@hereme.me — legal notices and questions about this agreement.
• security@hereme.me — a security weakness you have found.
• info@hereme.me — everything else.