📱 Chamaa Privacy Policy

Chamaa is a digital Chama management platform operated by Jo-Jo Mani Investment Ltd (referred to as “we”, “us”, “our”, or “Company”). This Privacy Policy describes how we collect, use, store, and disclose your information when you access or use the Chamaa mobile application, website, and related services (collectively, the “App”). By using Chamaa, you agree to the practices described in this policy.

1. Information We Collect

a. Personal Information

• Full name
• Phone number
• Email address (optional)
• National ID or verification details (if required for KYC/regulatory compliance)

b. Financial Information

• Transaction history (contributions, payouts, loans)
• Group contributions, savings balances, and withdrawal records
• Payment details processed via mobile money (e.g., M-Pesa) or bank APIs (no raw card numbers stored on our servers)

c. Group Data

• Group membership & invitations
• Roles (Admin, Treasurer, Member, etc.)
• Meeting minutes, voting activity, and loan applications

d. Device & Usage Data

• Device type, operating system version, and unique device identifiers
• IP address, app version, crash logs, and interaction analytics
• Approximate location (with permission) for fraud prevention

2. How We Use Your Information

• Account management: Create, authenticate, and manage user profiles.
• Transaction processing: Facilitate contributions, withdrawals, loan disbursements, and real-time reconciliation.
• Group governance: Enable role-based permissions, voting, and transparent group decisions.
• App improvement: Enhance performance, fix bugs, and analyze user experience trends.
• Fraud & security: Detect suspicious activities, prevent unauthorized access, and safeguard funds.
• Legal compliance & risk management: Fulfill anti-money laundering (AML) obligations and respond to lawful requests.

3. How We Share Information

We never sell your personal data. Limited data sharing occurs only for essential operations:

• Payment processors & mobile money APIs: (Safaricom, Airtel Money, banks) to complete transactions.
• Service providers: Cloud hosting (secure servers), analytics partners (anonymized data), and push notification services.
• Legal authorities: When required by Kenyan law, court order, or to protect the rights and safety of users.
• Group members (limited context): Other members of your Chamaa group will see your display name, contribution history, and role for transparency — but never your sensitive ID numbers or payment credentials.

4. Data Security

Jo-Jo Mani Investment Ltd employs industry-grade security measures to protect your data:

• End-to-end encryption for sensitive financial data and API communications.
• Role-based access control and multi-factor authentication for treasurers/admins.
• Regular security audits and penetration testing.
• Audit logs that track all financial and administrative actions.

However, no online system is 100% secure. You are responsible for keeping your account credentials confidential. If you suspect any unauthorized access, contact us immediately.

5. Data Retention

We retain your personal data while your account is active or as needed to provide services. Financial transaction records are retained for at least 7 years to comply with Kenyan financial regulations and tax laws. After account closure, anonymized statistical data may be kept, but identifiable personal data will be deleted upon request unless retention is required by law.

6. Your Rights (Data Privacy & Access)

Depending on your jurisdiction (including Kenya’s Data Protection Act), you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your data (“right to be forgotten”), subject to legal obligations.
• Withdraw consent for optional data processing (e.g., marketing communications).
• Object to processing based on legitimate interests.

To exercise your rights, email our Data Protection Office at: david15okoth@gmail.com or call 0710962545. We will respond within 30 days.

7. Cookies and Tracking Technologies

We may use cookies, session tokens, or similar technologies to remember login sessions, improve performance, and understand usage patterns. You can manage cookie preferences via your device settings, but disabling cookies may affect some app features.

8. Third-Party Services & Links

Chamaa integrates with trusted third-party platforms (mobile money gateways, cloud storage, analytics). These services have their own privacy policies, and we encourage you to review them. We are not responsible for the data handling practices of independent third parties.

9. Children’s Privacy

Chamaa is strictly intended for users aged 18 years or older. We do not knowingly collect personal data from minors. If we become aware that a user under 18 has provided us with personal information, we will take steps to delete it immediately. Parents/guardians may contact us to report any concerns.

10. Updates to this Privacy Policy

We may update this Privacy Policy to reflect legal, operational, or technical changes. We will notify users of material updates via in-app notification or the email address associated with your account. The “Effective Date” at the top of this page indicates when the latest version became active. Continued use of Chamaa after changes constitutes acceptance of the revised policy.

11. Contact Us & Data Controller Information

Company name: Jo-Jo Mani Investment Ltd (trading as “Chamaa”)
Registered business location: Westlands, Nairobi, Kenya.
General support: For technical issues or account help, contact our support team at the email/phone above.

By using Chamaa, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and storage of your information as described herein.