What we hold, and why

Our commitments

• Regulatory compliance

  We register and operate in line with Kenya's Data Protection Act (2019), with a designated data protection contact and this published privacy notice. Registration with the Office of the Data Protection Commissioner is completed before identity documents are collected at any scale, and a data protection impact assessment covers identity documents, location data and children's data.

• Verification data is used only to verify

  Documents and details collected to confirm who you are are used for that and nothing else — never for marketing, never for profiling, and never shared with partners.

• How documents are stored

  We store the outcome of a check and a hash, not a browsable ID number. Document images are encrypted, access-logged, and held separately from your account record.

• How long documents are kept

  Document images are deleted once verification is complete and the outcome recorded, subject only to a statutory retention period. A rejected application is kept just long enough to prevent immediate re-application abuse, then deleted.

• Proportionate collection

  Verification depth scales with what a role can do. A citizen logging waste is asked for a phone number; identity documents are requested only when an action warrants them, such as a first cash-out.

• Lawful basis & consent

  Purchase-data linkage and location tracking are explicit, revocable opt-ins, presented in plain English. Neither is switched on by default.

• Data minimisation

  We collect only what a stated feature requires, and retain personal data for a defined and published period.

• Encryption

  TLS in transit, and encryption at rest for personal, location and payment reference data.

• Access control

  Role-based access with row-level scoping, least-privilege defaults, and immutable audit logging of every administrative action.

• Anonymisation

  Government, donor and research reporting is served from aggregated, de-identified datasets by default.

• Payment security

  No card or PIN data is ever stored. M-Pesa is handled entirely through the official API, and we persist a transaction reference only.

• Child & student data

  School programmes involving minors carry additional safeguards and require institutional consent before any student is onboarded.

• Your rights

  Access, correction, export and deletion controls are available in the app, with a documented response process behind them.

• Vendors & incidents

  Data processing agreements are in place with third-party providers, alongside a documented breach notification procedure.