Usiku huo, walkers walikusanyika dukani bila kujua Asha alikuwa anaenda kusema nini.
Asha alichukua tablet yao ya check-in.
Akafungua form.
Akabonyeza disable.
Mariam akasimama pembeni.
“Kwa nini?” member mmoja akauliza.
Asha akawaambia.
Si kuhusu Juma details. Si kuhusu health. Kuhusu fact kwamba maneno ya check-in yanaweza kuwa yameingia WellShift workflow bila consent.
“Nilifanya kosa,” Asha alisema. “Niliweka form rahisi na link public. Sikujenga privacy rules. Nilidhani kwa sababu group si biashara, data yetu si valuable.”
Sudi akasema, “Nani aliichukua?”
“Tunathibitisha.”
Mtu mwingine akasema, “Basi tuache group yote.”
Mwanamke mmoja akapinga.
“Hii ndiyo kitu pekee ninachofanya bure kabla kazi.”
Argument ikaanza.
Asha hakutaka kuamua peke yake.
“Vote.”
Choices zilikuwa tatu.
Funga kila kitu.
Endelea na walk, hakuna check-in data.
Endelea na paper opt-in limited.
Members wakajadili kwa dakika arobaini.
Mariam akasema, “Walking itself is not evidence.”
Elias, aliyekuja kwa invitation, alitoa idea ya paper consent code kwa statement yoyote ya complaint, independent ya group participation.
Sudi akasema, “Na emergency contacts?”
“Separate,” Elias akasema. “Optional.”
Vote ilipita:
Walks ziendelee.
Check-ins zisimame.
Statements za complaint ziwe individual consent.
Committee ya watu watatu isimamie group.
Asha hakutarajia point ya mwisho.
“Committee?”
“Ndiyo,” Mariam alisema. “Si wewe peke yako.”
Asha alihisi kitu ndani yake kikikaza.
Group ilikuwa idea yake. Route yake. Kettle yake. Whistle yake.
Kisha akakumbuka Juma.
“Okay.”
Walichagua Mariam, Sudi na Mama Beka.
Asha akabaki facilitator wa zamu, si owner.
Sudi akasema, “Nina kitu.”
Alifungua archived members list.
Account ya Sam ilikuwa bado active.
Last login: dakika mbili zilizopita.
“Account hii ndiyo manager?” member akauliza.
Asha akasema, “Tunashuku identity. Hatutaji jina mpaka verification.”
“Delete.”
“Preserve first.”
Mariam akatuma complaint preservation request kupitia vendor channel.
Elias akasema, “Password reset?”
“Hatuna credentials.”
“Good.”
Wakaondoa account access bila kuingia profile yake.
Group iliendelea kupanga walk ya kesho.
Hakuna form.
Hakuna score.
Asha alisimama nyuma ya counter na kuona watu wanaongea bila tablet kati yao.
Alihisi loss na relief kwa wakati mmoja.
Kikundi kilikuwa kimeondoka mikononi mwake.
Kabla vote, member aliyeitwa Halima aliuliza swali ambalo Asha hakuwa ameandaa.
“Check-ins zetu ziko wapi?”
Asha akafungua form backend.
“Kwenye spreadsheet ya group.”
“Access nani?”
“Mimi na Mariam.”
Sudi akasema, “Basi privacy problem si company tu.”
Room ikawa kimya.
Asha akakubali.
“Ni kweli.”
Walifungua access list. Mariam alikuwa admin. Asha admin. Old volunteer mmoja alikuwa bado editor ingawa ameacha miezi miwili iliyopita.
“Remove,” members wakasema.
Asha akaondoa baada ku-preserve audit log.
Kikundi kilianza kujitengenezea rules ambazo Asha hakuwahi kufikiria: - raw check-ins delete baada ya short period; - no wellness scoring; - emergency contact separate; - consent kwa complaint separate; - no mandatory attendance; - committee access, not founder-only.
Member mmoja akasema, “Kwa nini tusitunze count tu ya walkers?”
Mama Beka akajibu, “Kwa nini tunahitaji count?”
“Funding someday.”
“Basi funding inaweza kuja na problem ileile.”
Discussion hiyo ilikuwa living version ya data minimization.
Elias akatengeneza paper consent slip ambayo ilikuwa na option: `Ninakubali statement yangu itumike kwa complaint` yes/no. No health question.
Mariam akasema, “Paper inaweza kupotea.”
“Then one-time code kwenye secure complaint form, si group app,” Elias akasema.
Committee ikachagua hybrid.
Asha aliona role yake ikipungua. Kila decision aliyokuwa amezoea kufanya mwenyewe sasa ilihitaji vote au committee.
Alihisi hasira ndogo ambayo hakutaka kukubali.
Baadaye Mariam alimwambia, “Unaonekana kama umefukuzwa kwenye nyumba yako.”
“Kidogo.”
“Good.”
“Kwa nini good?”
“Kwa sababu ndiyo ulitaka—group isitegemee wewe.”
Asha akakubali kwa shida.
Account ya Sam ilikuwa issue nyingine. Sudi alikuwa na archived invite, lakini baadhi members walitaka kuchapisha screenshot ya username.
Asha akasema, “No.”
“Anatu-spy.”
“Maybe. Lakini account identity bado inahitaji verify.”
“Last login ndiyo sasa!”
“Preserve. Remove access. Verify.”
Mariam akatuma preservation request kwa vendor. Sudi aka-export invite email yake mwenyewe.
Asha akafunga auto-form permanently.
Walk ya kesho ingeanza bila check-in.
Kwa mara ya kwanza tangu group ianze, Asha hangejua hata approximate nani amethibitisha kuja.
Hilo lilimwogopesha.
Na lilikuwa point kabisa.
Baada vote, committee ilifanya audit ya systems zao kabla mtu yeyote hajaondoka.
Spreadsheet ya check-ins ilikuwa na rows 1,842.
Mariam akasema, “Delete?”
Sudi akasema, “Preserve for complaint.”
Asha akasema, “Both can be true. Freeze access, export evidence under counsel, then retention decision.”
Njeri kwa simu aliwashauri wa-preserve minimum relevant sample na audit log; data nyingine isihifadhiwe forever kwa sababu ya case.
Committee ikakubali.
Asha alijikuta hana final vote ya kipekee.
Mama Beka akasema, “Tunaweza kuweka raw form offline mpaka regulator aseme.”
Wakaifanya read-only, access kwa committee + counsel key, si founder account tu.
Then they reviewed emergency contacts. Zilikuwa stored kwenye spreadsheet ileile. Hilo lilikuwa privacy risk.
Sudi akasema, “Separate tomorrow.”
Asha akakubali.
Members walitengeneza walk sign-up mpya bila name requirement—route/time tu. Ukihitaji safety buddy, unachagua buddy direct.
Mariam akasema, “Hii ndiyo low-cost mental-health thing tulitaka tangu mwanzo.”
“Walk?”
“Ndiyo. Si score.”
Asha aliona jinsi system ilivyoweza kurudi simple.
Account ya Sam ilipoonekana last login dakika mbili zilizopita, tension ilirudi.
Sudi akataka reset password ya account.
“Hatuna authority,” Asha alisema.
“Ni group yetu.”
“Account ni member account. Tuna authority ku-remove membership, si kuingia.”
Waka-remove.
Vendor preservation request ikaenda kabla removal complete. Audit log ikaonyesha timestamp.
“Now?” Sudi akauliza.
“Now verify identity.”
Asha hakutaka public accusation iwe fuel ya next chapter. Hivyo official update kwa members ilikuwa: *Account moja inayohusiana na company liaison imeondolewa pending verification. No member should contact suspected person directly.*
Mariam akasema, “Watu hawatapenda wording.”
“Safety.”
Asha akaenda nyuma ya counter, akafungua cash book.
Sales ya usiku ilikuwa down kwa sababu amefunga early mara mbili.
Case ilikuwa tayari inamgharimu biashara kabla trademark demand.
Hilo lilimfanya vote ya committee kuhusu ownership kuwa less romantic. Asha alikuwa anajifunza kwamba shared governance haiondoi gharama; inaondoa tu mtu mmoja kuwa default wa kila decision.
Na “Sam” alikuwa ametazama mpaka dakika mbili kabla.