Privacy Policy

Personal Information You Disclose to Us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register on our services, express an interest in obtaining information about our products, participate in activities on the services, or otherwise contact us. The personal information we collect may include:

• Names
• Phone numbers
• Email addresses
• Usernames
• Passwords

Sensitive Information

When necessary and with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information: financial data.

Payment Data

We may collect data necessary to process your payment if you make purchases, such as your payment instrument number and associated security code. All payment data is stored by M-Pesa. You may find their privacy notice at safaricom.co.ke/dataprivacystatement.

Application Data

If you use our mobile application, we may collect the following information if you grant access or permission:

• Geolocation Information — to provide location-based services. You may change this permission in your device settings at any time.
• Electronic Device Data — including device ID, model, manufacturer, operating system, browser type, IP address, and app usage information. This is needed to maintain security and for internal analytics.
• Push Notifications — we may request permission to send push notifications about your account. You may opt out in your device settings.

Information Automatically Collected

In Short: Some information — such as your IP address and browser characteristics — is collected automatically when you visit our services.

We automatically collect certain information when you visit, use, or navigate our services. This includes device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and information about how and when you use our services. Like many businesses, we also collect information through cookies and similar technologies.

Information Collected from Other Sources

In Short: We may collect limited data from public databases, marketing partners, and other outside sources.

To enhance our ability to provide relevant services and update our records, we may obtain information about you from public databases, joint marketing partners, affiliate programs, data providers, and other third parties. This may include mailing addresses, email addresses, phone numbers, and social media profile information.

In Short: We process your information to provide, improve, and administer our services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, including:

• To facilitate account creation and authentication — so you can create and log in to your account and keep it in working order.
• To deliver and facilitate services to you — to provide the services you have requested.
• To enable user-to-user communications — if you choose to use offerings that allow communication with another user.
• To evaluate and improve our services — to identify usage trends, assess the effectiveness of our promotional campaigns, and improve our services, products, and your experience.
• To comply with our legal obligations — to respond to legal requests and exercise, establish, or defend our legal rights.

In Short: We may share information in specific situations described in this section and with the following categories of third parties.

We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us and require access to your information to do that work. Categories of third parties we may share personal information with include:

• Data analytics services
• Government entities
• Payment processors

We may also share your information in the following situations:

• Business Transfers — in connection with any merger, sale of company assets, financing, or acquisition of all or part of our business.
• Google Maps Platform — we share information with Google Maps Platform APIs (e.g. Google Maps API, Places API) to provide location features. See Google's Privacy Policy.

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (such as web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice. We also use Google Analytics to understand how visitors interact with our site — you can opt out via Google's opt-out tool.

In Short: We keep your information for as long as necessary to fulfil the purposes outlined in this privacy notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it — or, if deletion is not possible (for example, because your information has been stored in backup archives), we will securely isolate it from further processing until deletion is possible.

In Short: We aim to protect your personal information through a system of organisational and technical security measures.

We have implemented appropriate and reasonable technical and organisational security measures to protect the security of any personal information we process. However, despite our safeguards and efforts, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security. Although we will do our best to protect your personal information, transmission of personal information to and from our services is at your own risk. You should only access the services within a secure environment.

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18 years of age. By using our services, you represent that you are at least 18 years old, or that you are the parent or guardian of a minor and consent to such minor's use of the services. If we learn that personal information from users under 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any such data, please contact us at [email protected].

In Short: You may review, change, or terminate your account at any time.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us using the details provided in this notice. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

Opting out of marketing communications: You can unsubscribe from our marketing and promotional communications at any time by clicking the unsubscribe link in any email we send, replying 'STOP' to any SMS we send, or by contacting us directly. You will be removed from our marketing lists. However, we may still send you service-related messages necessary for the administration of your account.

Cookies: Most web browsers are set to accept cookies by default. You can choose to set your browser to remove or reject cookies, though this may affect certain features of our services. To opt out of interest-based advertising, visit aboutads.info/choices.

Account Information: To review or change the information in your account, or to request termination of your account, contact us using the information provided below. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, and comply with applicable legal requirements.

Most web browsers and some mobile operating systems and applications include a Do-Not-Track ('DNT') feature or setting you can activate to signal your preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated 'Revised' date and will be effective as soon as it is accessible. If we make material changes to this notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to stay informed of how we are protecting your information.

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it in some circumstances. To request to review, update, or delete your personal information, please contact us at [email protected] or via our contact page. We will consider and act upon any request in accordance with applicable data protection laws.