Privacy policy

The short version

Jamii Pay helps community groups track and reconcile the contributions they collect. We never hold your money: payments go straight from the contributor to the group's own M-Pesa Paybill or Till. We keep the records needed to show who paid what, and we don't sell personal information or show adverts.

What we collect

• Your account: your name, and the email address or phone number you sign in with. If you use a password, we store only a one-way hash of it, never the password itself.
• Group records: the groups you belong to and your role, collections, the names and phone numbers of contributors that a group's treasurer adds or that people enter when they pay, expected and paid amounts, and expenses a treasurer records.
• Payments: for each payment, the amount, time, M-Pesa receipt number, and the payer's phone number and name as M-Pesa reports them.
• Identity verification (optional): if you choose to verify your identity, your ID type and number and the documents you upload.
• Activity history: an audit log of important actions in a group (who changed a role, who matched a payment), so a group can see what happened and when.
• Messages: a record of SMS and WhatsApp messages we send on a group's behalf, such as receipts and reminders.

How we use it

To run the service: sign you in, match payments to the right person, show a group its books, send the receipts, reminders and reports a group has switched on, and keep the service secure and free from abuse.

A group's treasurer decides who is added as a contributor and which messages are sent. Groups are responsible for having a good reason to contact the people they add.

Who can see it

• Inside a group: admins, treasurers and auditors can see contributor details and payments for their own group. Ordinary members cannot see other people's details. One group can never see another group's data.
• On a payment page: anyone with the link sees the collection's name and description, and only if the treasurer turns it on, a list of contributors by first name and last initial. Never phone numbers or amounts.
• Service providers that process data for us: Safaricom (M-Pesa payments), Africa's Talking (SMS), Meta (WhatsApp messages), and our hosting and file-storage providers. They act on our instructions and only for these purposes.

We disclose information if the law requires it. We do not sell personal information.

How long we keep it

Group records are kept while the group uses Jamii Pay, because they are the group's financial history. If you delete your account, we erase your personal details and remove you from your groups. The payments and audit history of those groups stay, showing “Deleted user” in place of your name.

Your rights

Under the Kenya Data Protection Act, 2019, you can ask what we hold about you, ask us to correct it, object to how it is used, and ask us to erase it. You can delete your account yourself from Account details in the menu. For anything else, contact us.

Cookies

We use a single sign-in cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Security

Connections are encrypted, passwords are hashed, access to each group's data is checked on the server on every request, and sensitive actions are logged. No system is perfectly secure, and we will tell affected people and the regulator if a breach puts your data at risk.

Contact

Questions or requests: use the contact details in the app's Help and support page.