Legal
Privacy Policy
Last updated: 11 June 2026
This Privacy Policy explains what information Group Lending collects, how we use it, and the choices you have. By using the service you agree to the practices described here.
Information we collect
- Phone number — your primary identity, verified by a one-time SMS code.
- Profile details — your name and, optionally, a photo you choose to add.
- Group activity — contributions, loans, repayments, payouts, votes, and other records you create within your groups.
- Device & usage data — basic technical information needed to operate and secure the app.
We do not collect identity documents. There is no KYC document storage — membership relies on a verified phone number and the trust of your group.
Mobile money (M-Pesa)
When you pay or receive money through M-Pesa, we exchange the information required to process that transaction with the mobile-money provider and record the result in your group's ledger. We do not store more payment data than is necessary to operate the service.
How we use your information
- To operate your groups — recording contributions, loans, payouts, and elections.
- To send you notifications such as due-date reminders and approvals.
- To keep the service secure and prevent fraud and abuse.
Advertising and your data
Group Lending is funded by financial institutions advertising to our community. We never sell your financial data, and advertisers never see your transactions. Any targeting is coarse — based on general signals such as group type and region — and you keep frequency and opt-out controls.
Sharing
We share information only with the service providers needed to run the platform (such as SMS and mobile-money partners), with members of your own groups as part of normal group activity, or where required by law. [PLACEHOLDER — confirm processor list with counsel.]
Data retention
Because the ledger is append-only, financial records are retained for the life of the group and as required by law. [PLACEHOLDER — define retention periods with counsel.]
Your rights
You may access and update your profile, and request information about the data we hold. [PLACEHOLDER — align with the Kenya Data Protection Act and other applicable law.]
Contact
Questions about this policy? Email hello@chama.ke.