Privacy Policy

Vuka Pesa operates as an authorized partner of CHAPEO CAPITAL LIMITED (Data Controller/Merchant of Record | CBK License No. CBK/DCP/2024/35), maintaining strict adherence to personal data protection standards. Our technical operations are managed exclusively by Frontline Digital Solutions Limited as Data Processor/Technical Service Provider, whose role is expressly limited to software development and system maintenance. Frontline does not participate in, nor bears responsibility for, any aspects of loan origination, credit assessment, account servicing, or debt collection activities.

This Privacy Policy outlines:

  • Categories of data collected
  • Purposes of processing and security measures
  • Third-party sharing protocols and legal bases
  • Your rights to access, correct, or restrict data usage

By using our Services, you consent to these terms. Discontinuation is required if you disagree. For inquiries or rights execution, contact us via designated channels. Review this policy in full for transparent understanding.

By downloading and using the Vuka Pesa application, you expressly authorize us to:

  1. Collect, process, and store your personal information for legitimate business purposes

  2. Assess your creditworthiness, including but not limited to:

    • Generating credit scores and reports
    • Evaluating loan eligibility

  3. Deliver financial services consistent with our Terms & Conditions

Your acceptance of this Privacy Policy constitutes informed consent to all data practices described herein. This consent remains valid throughout your engagement with our services.

SECTION 1: DEFINITIONS

This Privacy Policy governs the use of:

  1. The Vuka Pesa mobile application (“App”), whether downloaded from:

    • Our official website
    • The Google Play Store (“App Site”) After installation on your mobile device (“Device”).

  2. All services accessible through the App, whether provided via the App Site or any other affiliated platforms (“Service Sites”).

Definitions

For clarity, the terms below apply throughout this Privacy Policy:

  • “Compliance Obligations”: Legal requirements binding upon Vuka Pesa under domestic and international law, including internal policies and procedures.

  • “Consumer” or “User”: Any individual within the Republic of Kenya who utilizes Vuka Pesa’s products or services.

  • “Consumer Information”: Any data associated with the Consumer, including but not limited to:

    • Personal details
    • Transaction history
    • Usage of services
    • Records of prior engagements with Vuka Pesa

  • “Personal Data”: Any information that directly or indirectly identifies an individual (e.g., name, ID number, location data, online identifiers), whether stored digitally or physically.

  • “Sensitive Consumer Personal Data”: Data that reveals:

    • Marital or familial status (e.g., spouse/children’s names)
    • Work info and income info

  • “Services”: All offerings provided by Vuka Pesa, primarily through the App, during the user’s engagement with us.

  • “We”/“Our”/“Us”: Refers exclusively to Vuka Pesa.

  • “Consent”: A clear, affirmative action signifying your agreement to the processing of Personal Data. To be valid, consent must be:

    • Freely given
    • Specific to the intended use
    • Informed
    • Unambiguous

SECTION 2. INFORMATION WE COLLECT

Vuka Pesa collects and processes two primary categories of data:

  1. System-Authorized Data – Information accessed with user permission
  2. User-Provided Data – Information manually submitted by users, including but not limited to name, contact details, and other personal data

1.1 User-Authorized Data

Vuka Pesa collects the following data, contingent upon user authorization, to enhance service functionality, security, and risk assessment.

Emergency Contacts Information

Collected Data:

  • Phone numbers and details of emergency/reference contacts provided by the user

Purpose:

  • Creditworthiness verification
  • Fraud prevention and risk analysis
  • Loan eligibility assessment

Storage & Security:

  • Encrypted and transmitted securely to our server (https://rest.vukapesa.com/) via HTTPS protocol

Location Data

Collected Data:

  • Approximately device location information

Purpose:

  • Credit scoring model calculations
  • Security measures (e.g., fraud prevention in case of device theft)

Storage & Security:

  • Encrypted and transmitted securely to our server (https://rest.vukapesa.com/) via HTTPS protocol
  • No third-party sharing under any circumstances

Phone & Device Information

Collected Data:

  • Phone number
  • Device model, region, and language settings
  • Hardware & software specifications
  • IP address and device usage habits
  • Unique identifiers (IMEI, serial number, etc.)

Purpose:

  • Device authentication to prevent fraudulent access
  • Security verification to ensure transactions are performed only from recognized devices

Storage & Security:

  • Encrypted and transmitted securely to our server (https://rest.vukapesa.com/) via HTTPS protocol
  • Strictly not shared with third parties

Photo Album Access

Collected Data:

Access to your device’s photo gallery is requested exclusively for:

  • Submitting screenshots or images when reporting technical issues
  • User-initiated uploads only (no automatic scanning of your gallery)

Purpose:

Uploaded images are used strictly for:

  • Troubleshooting and resolving service-related concerns
  • Improving app functionality based on user feedback

Under no circumstances will these images be:

  • Stored beyond the resolution period
  • Used for marketing or unrelated processing
  • Shared with or sold to third parties

Storage & Security:

  • Automatically deleted after issue resolution
  • Strictly not shared with third parties

1.2 Personal Data

What we monitor and collect:

“Personally identifiable information” refers to data that can uniquely identify a user, including but not limited to:

  • Full name (first name, last name, and optional middle name)
  • Date of birth and civil status
  • Employment details (job position, income level)
  • Bank account information
  • Residential address (state/region)
  • Contact details (phone number, email address)
  • Any personal information provided during customer service interactions, complaints, or disputes

Purpose:

We require personally identifiable information to:

  • Fulfill legal and compliance obligations (KYC/AML requirements)
  • Verify user identity and creditworthiness
  • Prevent fraud and financial crimes
  • Process loan applications and transactions
  • Communicate loan offers (with user consent)
  • Conduct customer surveys and service improvements

While some information is provided voluntarily, certain data is mandatory for accessing Vuka Pesa’s core services, particularly for loan processing.

Data Protection:

All personal information is:

  • Collected through secure, encrypted methods
  • Used strictly for stated purposes
  • Protected in accordance with Kenyan data protection regulations

User Rights:

  • You may opt out of marketing communications
  • You may request access to or correction of your data
  • Contact our support team for any privacy inquiries:feedback@vukapesa.com

SECTION 3. WHY WE COLLECT INFORMATION

We collect and process your information for the following essential purposes:

  • Transaction Processing

    • To execute and complete your financial transactions efficiently

  • Identity Verification

    • To authenticate your identity in compliance with regulatory requirements

  • Credit Risk Assessment

    • To evaluate creditworthiness when processing loan applications

  • Fraud Prevention

    • To screen our database for duplicate or fraudulent entries
    • To identify potential blacklist matches

  • Loan Services

    • To facilitate loan disbursements
    • To manage repayment collections

  • Credit Modeling

    • To develop and enhance our credit scoring algorithms
    • To refine our risk assessment models

  • Personalized Services

    • To tailor loan products to your specific financial profile

  • Customer Analytics

    • To analyze usage patterns and improve service delivery

  • Service Maintenance

    • To identify and resolve technical issues

  • Regulatory Compliance

    • To adhere to KYC and anti-money laundering regulations
    • To satisfy other legal requirements

  • Security Measures

    • To detect and prevent fraudulent activities
    • To protect against unauthorized service usage

  • Customer Communications

    • To deliver marketing materials and service updates
    • To share promotional offers (with your consent)
    • To contact you via automated calls or SMS when necessary

SECTION 4. HOW WE USE AND SHARE INFORMATION

1. Consent & Scope By utilizing our Services, you authorize Vuka Pesa and its affiliated entities to process your Customer Information in accordance with this Privacy Policy.

2. Usage of Collected Information All data collected shall be used exclusively for the purposes outlined in this policy. We maintain strict confidentiality regarding personally identifiable information and disclose it only when essential for service provision.

3. Data Sharing Guidelines

We may share your information with the following entities under specified conditions:

a. Internal & Operational Partners

  • Vuka Pesa affiliates for administrative functions or credit assessment
  • Subcontractors/service providers supporting our operations

b. Emergency Contacts

  • Individuals you designate as emergency contacts, solely for: • Verification of their consent • Communication regarding loan defaults or unreachable status

c. Credit & Financial Institutions

  • Credit reference bureaus for creditworthiness evaluation
  • Financial partners for risk assessment

d. Third-Party Processors Vetted providers assisting in:

  • Identity verification (KYC/AML compliance)
  • Fraud prevention & transaction processing
  • Customer service, debt recovery, or legal obligations

e. Legal & Regulatory Disclosures To government/legal entities when required by:

  • Judicial/court orders
  • Suspected illegal activity investigations
  • Prevention of financial/physical harm

4. Anonymized Data Aggregated, non-identifiable user statistics may be shared for research or portfolio analysis.

5. Combined Data Treatment Interlinked data categories will be holistically managed as Consumer Information under this policy.

6. Liability Disclaimer Vuka Pesa bears no liability for lawful data handling per these terms, including actions taken under this section.

SECTION 5. WHERE WE STORE INFORMATION

Vuka Pesa serves as the designated data controller for your personal information. We are deeply committed to safeguarding your privacy and ensuring the lawful processing of your personal data in strict accordance with applicable data protection legislation.

While we implement robust security measures, we must advise that no electronic transmission over the internet can be guaranteed as completely secure. Despite employing industry-standard protections, we cannot provide absolute assurance regarding the security of data transmitted to our platforms; all transmissions occur at the user’s discretion and risk. Upon receipt of your information, we enforce rigorous protocols and advanced security mechanisms designed to thwart unauthorized access attempts.

Please be aware that the personal data we collect may be transferred to, and maintained at, jurisdictions outside Kenya’s borders. Such information may potentially be processed by our personnel or authorized third-party suppliers operating internationally who are involved in servicing your requirements. Your explicit provision of personal data constitutes consent to this potential cross-border transfer and processing.

We undertake all commercially reasonable measures to ensure your data receives appropriate protection consistent with this Privacy Policy. Furthermore, we reserve the right to disclose your information to any necessary parties when reasonably required to deliver account-related services or fulfill our contractual obligations.

SECTION 6: CUSTOMER OBLIGATIONS AND RIGHTS

Data Protection Rights Notification

You retain the fundamental right to:

  • Request rectification of inaccurate personal data
  • Petition for the erasure of your data under applicable circumstances
  • Seek restrictions on the processing of your information
  • Obtain access to your personal data holdings

Obligation to Maintain Current Information

You expressly agree to notify us in writing via email at feedback@vukapesa.com of any modifications to your provided customer information, with such updates to be communicated promptly and in no event later than thirty (30) calendar days following any change.

Service Continuation Conditions

Please be advised that failure to:

  1. Provide essential consumer information required for Vuka Pesa’s services,

  2. Maintain necessary content for information processing, or

  3. Resolve reasonable suspicions regarding:

    • Unlawful platform usage
    • Fraudulent activities
    • Financial crimes May result in service suspension. We reserve the exclusive right to terminate the business relationship and undertake appropriate remedial actions pursuant to our internal compliance protocols and regulatory obligations.

Authentication Credential Responsibility

For authentication credentials (including passwords or PINs) issued or selected for platform access, you bear sole responsibility for:

  • Maintaining strict confidentiality
  • Preventing unauthorized sharing
  • Ensuring no disclosure to third parties

We expressly prohibit sharing login credentials with any individual or entity without proper authorization.

SECTION 7. DATA RETENTION

Data Retention Periods

We retain your personal data only for as long as necessary to:

  • Fulfill the terms of the loan agreement
  • Pursue our legitimate business interests
  • Comply with statutory data retention requirements

Exceptions to Data Deletion Requests

Vuka Pesa may lawfully continue processing your data, even after a deletion request, where required:

  • To satisfy legal or regulatory obligations
  • For legitimate statistical analysis
  • To establish, exercise, or defend legal claims

Long-Term Retention of Key Data

The following categories of your data will be retained for the applicable statutory limitation period:

  • Personal identification details
  • Terms and performance of your loan agreement
  • Creditworthiness assessments and risk analyses (for future lending decisions)

Marketing Communications

We process your data to deliver commercial information about Vuka Pesa’s products and partner offerings until you object to such processing.

When processing relies on your consent, we retain and use the relevant data only until:

  • You withdraw consent
  • The consent expires (if subject to a predefined time limit)

SECTION 8. MINORS

Vuka Pesa expressly prohibits the provision of financial services, including loans, to individuals below the legal age of majority (18 years or older, as per applicable jurisdiction).

SECTION 9. QUESTIONS AND CHANGES

Vuka Pesa reserves the right to modify this Privacy Policy periodically to reflect regulatory changes and operational improvements. All amendments will be:

  1. Publication Protocol

    • Immediately published on this dedicated policy page
    • Archived with version control for historical reference

  2. User Notification System

    • Mandatory in-app alerts upon your next login
    • Summary banners highlighting material changes
    • Required acknowledgment for continued service access

  3. Consent Management

    • Major updates may require electronic acceptance of revised terms

For all policy-related questions or concerns, please direct communications to:

feedback@vukapesa.com or +254207905199