Privacy Policy

What we collect. Your name, email address, and phone number; optional profile details you choose to add (county, date of birth, gender, occupation, bio, avatar photo); membership and transaction records (plan, amount, status, and the payment provider reference — never your card number or M-Pesa PIN); referral, points and cashout activity, including payout details (such as an M-Pesa number) you submit with a cashout request; and any message you send us through the Contact page.

Why we collect it. To create and secure your account, verify membership payments, run the referral and rewards program, review and pay out cashout requests, respond to messages you send us, and keep the records required for financial reconciliation and dispute resolution.

Who we share it with. Paystack, our payment processor, handles membership payments and cashout payouts and receives the information needed to do so (such as your phone number and payout details). We do not sell your personal information. Only authorized administrators — on a least-privilege, role-based basis (finance, content, or support administrators as relevant to their role) — can access account, payment, or referral records.

How long we keep it. For as long as your account is active, plus any period required by law for financial and transaction records. Contact-form messages are kept for as long as needed to respond to and resolve your enquiry.

Security. Passwords are never stored in plain text. Database-level access rules restrict every table to the account owner and the administrators whose role requires access, and cashout approvals can require one-time-passcode (OTP) verification.

Cookies. We use only the strictly necessary cookies set by our authentication provider to keep you signed in. We do not use advertising or third-party analytics cookies.

Your rights. Under Kenya's Data Protection Act, you may request access to, correction of, or deletion of your personal information, or object to how it is processed, by contacting us through the Contact page. We may need to retain certain financial records even after a deletion request where the law requires it.

Changes to this policy. We may update this Privacy Policy from time to time; the "last updated" date above reflects the current version.