Rose Kairu

Home / Work / Tando

Tando: personal data out, before AI reads it

People paste real names, ID numbers and phone numbers into AI chatbots every day. Tando catches them on the way out.

Role
Design and engineering
Type
Chrome extension
Built with
Chrome extension APIs
Status
In build, 2026

The problem

AI tools are now part of daily work in Kenyan offices, but staff paste in whatever is in front of them: a client's complaint, a beneficiary list, an HR email. Under the Data Protection Act, that can mean sending personal data to a company abroad without the safeguards the law requires.

Policies telling people "don't paste personal data" don't work on their own. I wanted a tool that makes the safe option automatic.

How it works

  1. 01

    You type a prompt

    Tando watches the chat box on supported AI sites.

  2. 02

    It finds personal data

    Names, Kenyan ID and phone numbers, KRA PINs, account numbers, emails. All on your device.

  3. 03

    The chatbot gets a clean copy

    Labels replace the data, so the answer still makes sense.

Try it · Tando demo

Type something with personal data in it.

What the chatbot receives

This runs in your browser, so your message never leaves the page.

What I learned

Kenyan data doesn't look like the examples in most redaction libraries. Phone numbers start with 07, 01 or +254, ID numbers run from 7 to 9 digits, KRA PINs mix letters and numbers, and many names aren't in Western name lists. So Tando's rules start from local formats first.