Privacy Policy

1.1 Personal Identification Information

When you register as a member of a group on the Platform, we collect:

• Full name
• Email address and phone number
• National ID number, where required by your group for member verification
• Profile photograph (optional, uploaded by you)

1.2 Financial Information

The Platform is a record-keeping tool: it does not process or receive any contribution or loan payments itself. Your group's officials log the following into the Platform for transparency:

• Contribution records (amounts due, amounts paid, due dates)
• Loan records (amounts, interest rates, repayment schedules, disbursements, outstanding balances)
• Payment reference notes your group records for its own purposes (e.g. a receipt number or M-Pesa code), where it chooses to record one
• Penalty records for late or missed payments
• Group wealth and growth records visible to your group

1.3 Activity & Participation Data

• Meeting and event attendance
• Your role within the group (e.g. member, treasurer, chairperson)
• Approval actions you perform or that apply to your records
• Notifications sent to or triggered by your account

1.4 Usage & Account Data

• Last login date and time
• Account verification status
• Session information for keeping you logged in

We use the information we collect solely to provide and improve the Platform's services:

• To create and manage your member account within your group
• To track and process your contributions, loans, and repayments
• To generate financial reports and dashboards for your group's officials
• To send you notifications (e.g. payment confirmations, loan disbursements, meeting reminders) via SMS, email, or in-app push
• To enforce account security, including verification and password management
• To maintain audit trails for group governance and accountability
• To comply with legitimate legal and regulatory obligations

Where the Kenya Data Protection Act, 2019, or other applicable data protection law applies, we process your personal data on the following bases:

• Contractual necessity: to fulfil our obligations to you as a registered member of your group.
• Legitimate interests: to operate, secure, and improve the Platform, and to maintain accurate financial records for your group.
• Consent: where you have explicitly provided it (e.g. uploading a profile photo, enabling push notifications).
• Legal obligation: where processing is required by applicable law or regulatory requirements.

We do not sell or rent your personal information. We share data only with the service providers necessary to operate the Platform:

We implement measures to protect your personal and financial data:

• Passwords are never stored in plaintext and cannot be recovered by anyone, including administrators
• Login sessions expire automatically to reduce risk if a device is compromised
• Connections to the Platform are encrypted in transit
• Your group's financial data is accessible only to authorized members and group officials

No method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password and keep your login credentials confidential.

We retain your personal data for as long as your membership is active or as needed to provide the Platform's services. Financial records (contributions, loans, repayments) are retained for the period required to fulfil your group's governance and audit obligations.

When you request account deletion, your account is deactivated after email confirmation. Your financial history may be retained in anonymized form to preserve your group's record integrity. You may contact us to request permanent erasure of your personal information.

Depending on your jurisdiction, you may have the following rights over your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: correct inaccurate personal information
• Erasure: request deletion of your account and associated personal data
• Restriction: request that we limit processing of your data in certain circumstances
• Portability: request your data in a structured, machine-readable format
• Objection: object to processing based on our legitimate interests
• Withdrawal of consent: withdraw consent you previously gave

To exercise any of these rights, contact us using the details in Section 10. In Kenya, you may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

The Platform uses essential cookies to keep you logged in and maintain your session. These cookies are not used for advertising or tracking.

Your session expires automatically after a period of inactivity for your security. You may clear cookies at any time through your browser settings, which will log you out of the Platform.

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us so we can delete it.

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the Platform after any changes constitutes acceptance of the updated policy.