Privacy Policy
Draft for review. Last updated 31 October 2026.
What we collect
- Account details: name, email, phone number and a hashed password. We never store your password itself.
- Kitty and payment records: amounts, references, contributor names and phone numbers, and withdrawal destinations.
- Basic technical data such as your IP address, used to protect sign-in from abuse.
How we use it
To run your account, record contributions and withdrawals, process payments, prevent fraud, and send service emails such as password resets.
Who sees it
Other people see only what a kitty page needs: the kitty details, contributor names (or "Anonymous") and amounts. Phone numbers are masked. We share data with payment and email providers only to deliver the service, and with authorities where the law requires.
Your rights
Under the Kenya Data Protection Act, 2019 you can ask to access, correct or delete your personal data, and to object to its use. Financial records may be kept as long as the law requires.
Security
Passwords are hashed, sessions use secure cookies, and our database is not open to the public internet APIs.
Contact
M-Pamoja Africa, Nairobi, Kenya.