Privacy Policy

This Privacy Policy describes how we collect, use, disclose, and protect your information when you use Kesh ("we", "our", or "us"), a peer-to-peer payments app tailored for users in Kenya.

By using Kesh, you agree to the terms of this Privacy Policy and our Terms of Service. If you do not agree, please do not use our services.

1. Information We Collect

We collect the following categories of data:

a. Personal Identification Information

  • Full Name
  • National ID / Passport Number
  • Phone Number
  • Email Address
  • Date of Birth

b. Financial & Transactional Data

  • Bank account details or mobile money details (e.g., M-Pesa number)
  • Transaction history (amounts, recipients, timestamps)
  • Wallet balance
  • Linked payment methods

c. Device and Usage Information

  • Device type and operating system
  • IP address
  • App version and usage metrics
  • Location data (when enabled)

d. Verification Data

  • Selfie photos or ID uploads for KYC
  • Contacts (optional, for peer-finding)
  • SMS access (only to auto-detect one-time codes, if granted)

2. How We Use Your Information

We use your information to:

  • Verify your identity and comply with KYC/AML regulations
  • Facilitate money transfers between users
  • Detect and prevent fraud or unauthorized access
  • Send confirmations, alerts, or important updates
  • Improve app performance and user experience
  • Comply with Kenyan laws and regulatory requirements

3. Sharing Your Information

We may share your data only when necessary and with appropriate safeguards in place:

  • With regulatory bodies like the Central Bank of Kenya or the Office of the Data Protection Commissioner (ODPC), as required by law
  • With trusted third parties (e.g., payment processors, cloud infrastructure providers) who help us operate the service
  • In the case of a merger or acquisition, subject to your rights under Kenyan data laws
  • With your consent, for instance when inviting contacts or connecting your account to another service

We never sell your personal data.

4. Your Rights Under Kenyan Law

As a data subject under the Kenyan Data Protection Act (2019) , you have the right to:

  • Access and receive a copy of your personal data
  • Correct inaccurate or outdated information
  • Object to processing under certain conditions
  • Request erasure of your data ("right to be forgotten")
  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

To exercise any of these rights, email us at [email protected] or fill out this form https://forms.gle/vxP88UMJ8V5VUgRZ9 to submit your request to be forgotten.

5. Data Storage and Security

  • Your data is stored securely in cloud infrastructure located within or outside Kenya, in compliance with applicable data transfer laws.
  • We use encryption, access controls, and secure protocols to safeguard your information.
  • Only authorized personnel have access to sensitive data.

6. Data Retention

We retain your information only as long as necessary for:

  • Fulfilling legal, regulatory, and compliance obligations
  • Providing services and support
  • Resolving disputes and enforcing our terms

Typically, your transactional data will be retained for * 7 years***, as required by Kenyan financial regulations.**

7. Children's Privacy

Kesh is not intended for children under the age of 18. We do not knowingly collect personal data from minors.

8. Updates to This Policy

We may update this policy from time to time. We will notify users of material changes via the app or email.

9. Contact Us

If you have questions or concerns about this Privacy Policy, contact our Data Protection Officer:

Email: [email protected] Phone: +254 796 980788 Registered Office: Jahazi Building, James Gichuru Rd, Nairobi, Kenya