Privacy Policy

Information we collect

When you register and use the platform, we collect:

• Your name, phone number, email address, county, and a profile photo if you upload one
• Your national ID number and KRA PIN, for membership verification
• Identity and compliance documents you upload (ID copy, KRA PIN certificate, CRB clearance) and loan-related documents, as part of joining the group or requesting a loan
• Financial transaction records — deposits, withdrawals, loan requests, guarantees, investments, and repayments
• Your M-Pesa and bank payout details, where you provide them
• A bcrypt-hashed withdrawal PIN, if you set one — we never store or can see it in plain text
• If you use the AI Financial Advisor, your questions and its responses, so your conversation persists across sessions
• Correction requests you submit for your own details, and the resulting change history
• An optional external identity code from ProfileCodes.com, if you choose to link one — you create and manage that account yourself; we don't share your data with them
• If you sign in with Google, your name and email address as provided by Google

How we use your information

• To verify your membership (via KRA's registry) and activate your account
• To operate your wallets, process deposits and withdrawals, and manage loans, guarantees, and investments
• To power the optional AI Financial Advisor — it receives a computed summary of your own balances and scores, never your raw National ID number or KRA PIN, to answer your questions
• To communicate with you about your account — confirmations, receipts, and important notices
• To meet our own recordkeeping and compliance obligations as a registered welfare group

What's public, without an account

Most of the platform requires you to be a logged-in member. Two things are deliberately public:

• Member verification (pesayachama.com/verify) — anyone with a membership number can look up a member's name, membership number, status, official seat (if any), and linked ProfileCodes.com code. No financial information, contact details, or ID/KRA PIN numbers are shown.
• Select governance documents — our Certificate of Registration, Certified Group By-laws, and Group KRA PIN Certificate are viewable by anyone, the same documents we'd show a bank or a prospective member on request. Every other document (bank confirmation letters, meeting minutes, financial reports, the officials list) stays members-only.

Who we share information with

We share only what is necessary to actually operate the platform, with:

• NCBA Bank and Safaricom (M-Pesa/Daraja), to process deposits and payouts
• Supabase, our database, authentication, and file storage provider
• Vercel, our application hosting provider
• Anthropic, only if you use the AI Financial Advisor — it receives the computed account summary described above for that feature to work, and nothing else
• Resend, our email provider, to deliver account and transaction notifications

We do not sell member information to third parties, and we do not share your data for marketing purposes outside the group.

Data security and retention

All traffic is encrypted in transit (TLS); identity documents and account data are encrypted at rest by our hosting provider. Database access is scoped per member by row-level security, so one member's data is never reachable through another member's session. Your withdrawal PIN is bcrypt-hashed, never stored or returned in plain text, and locks out after repeated wrong attempts. Identity and compliance documents are stored in a private, access-controlled location and are not publicly accessible (see the exceptions above). We retain member records for as long as your membership is active, and for a reasonable period afterward to meet our own financial recordkeeping obligations.

Your rights

Under the KDPA, you have the right to access, correct, or request deletion of your personal data, subject to our need to retain financial records as required by law. You can correct most of your own details (phone, email, county, payout details) directly in Settings; sensitive fields go through a reviewed correction-request process. For anything else, contact us using the details below.

Contact us

Questions about this policy or your data can be sent to wealth@pesayachama.com.