Privacy Policy & Data Protection

In compliance with the Kenya Data Protection Act, 2019

1. Information We Collect

We collect personal identification data (Full Name, National ID, Phone Number, Date of Birth, Next of Kin, Email, and KYC identification documents) strictly for membership verification, regulatory SASRA reporting, and secure financial transactions.

2. Data Protection & Security

All financial records, identity documents, and sensitive credentials are encrypted using industry-standard TLS protocols and bcrypt password hashing. Access is strictly controlled via Role-Based Access Control (RBAC).

3. Third-Party Sharing

We do not sell or rent member data. Data is only shared with licensed payment gateways (Safaricom M-Pesa) and regulatory statutory bodies (SASRA, KRA) as mandated by law.