Skip to content

Legal

Privacy policy

What we collect, why we collect it, and how long we keep it.

Review notice: this policy is a working draft. It must be reviewed against the Kenya Data Protection Act (2019) and registered as required before public launch.

1. Information we collect

  • Your full name
  • Your Safaricom phone number
  • A hashed version of your 4 digit PIN. We never store your PIN in readable form.
  • Wallet, payment and payout records, including M-Pesa receipt references
  • Referral relationships between accounts
  • Technical information such as IP address, browser type and timestamps, used for security and audit logging

2. What we do not collect

  • We do not ask for an email address.
  • We do not ask for your M-Pesa PIN. We will never ask you for it.
  • We do not store card details or bank details.

3. Why we use it

To create and secure your account, to verify your M-Pesa number, to calculate and record eligible earnings, to send M-Pesa payouts to your verified number, to prevent fraud and duplicate payments, and to meet our legal and accounting obligations.

4. Who we share it with

We share the minimum necessary information with our M-Pesa payment infrastructure provider so that payments and payouts can be processed. That means the phone number and the amount for a specific transaction. We do not sell your personal data.

5. Public activity feed

Our landing page shows a feed of confirmed payouts. In that feed, phone numbers are masked so that middle digits are hidden. Complete phone numbers are never published, and names are never published.

6. How long we keep it

Financial records are retained even if you close your account, because they are needed for reconciliation, dispute resolution and legal compliance. Records are never deleted in order to hide a transaction.

7. Your rights

Under the Data Protection Act (2019) you may request access to the personal data we hold about you, ask for corrections, and object to certain processing. Contact us using the details below and we will respond within a reasonable period.

8. Security

We use HTTPS across the whole site, hash PINs with a strong algorithm, limit login attempts, protect forms against cross-site request forgery, and record audit logs for account, money and admin actions. Payment confirmations are authenticated and processed idempotently on our servers.

9. Contact

  • PlatformGREATMULLAH