Exercise10 min·Lesson 4 of 5
Try It Now — Privacy Audit
What you will need: Your smartphone (Android or iPhone). This audit takes about 10 minutes and does not require any app downloads. You will be checking real settings on your own device and reflecting on what you find.
Your 5-Step Privacy Audit
Step 1 — Check App Permissions (3 minutes)
Go to your phone Settings. Pick 3 apps you use regularly: your AI assistant or chatbot, one social media app, and your mobile banking app. For each one, note: Which permissions does it have? Location, contacts, microphone, camera? Are any of these surprising? Write down any permission that feels unnecessary.
Step 2 — Review Your AI Chat History (2 minutes)
Open any AI tool you have used (ChatGPT, Gemini, Claude, or another). Go to its settings or history. Look at your past conversations. Ask yourself: Did I share my real name, ID number, phone number, address, salary, or health details in any of these chats? If yes, find the option to delete that conversation.
Step 3 — Find the Opt-Out Setting (2 minutes)
On the same AI tool, navigate to Settings and look for an option that says something like "Improve the model with my data" or "Use conversations for training." Note whether this option is currently on or off. Decide whether you want to turn it off. There is no single right answer — this is about making an informed choice rather than accepting the default.
Step 4 — Check One App's Privacy Policy (2 minutes)
Pick any app on your phone that you use frequently. Go to tosdr.org and search for that app by name. What grade does it receive? Read one or two of the highlighted policy points — particularly any marked in red or orange. Does anything surprise you about how this app handles your data?
Step 5 — Strengthen One Password (1 minute)
Think of the most important account on your phone — your email, M-Pesa linked email, or mobile banking app. Is the password strong and unique? If you use the same password here as on other sites, change it now to something long and unique. A passphrase like "SimbaAnakimbia@2024!" is both strong and memorable. Enable 2FA on this account if you have not already done so.
Reflection Prompt: After completing your audit, write down one thing that surprised you and one thing you will change about how you use AI tools or share data online. You do not need to share this with anyone — it is for your own learning. The goal is to move from passive user to informed, active participant in your own digital safety.
You have completed Unit 8! You now understand how AI models use your data, what the Kenya Data Protection Act gives you, and practical steps to protect yourself. These skills will make you a more confident, safer user of every digital tool — and a more credible voice when these topics come up in the workplace.