Privacy Policy

Yokasre Consulting Limited ("Yokasre", "we", "us", or "our") operates the Nuru Chamani platform (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our web portal, mobile application, and related services (collectively, the "Services"). By using our Services, you agree to the practices described in this Policy.

1. Information We Collect

1.1 Information You Provide Directly

When you register or interact with the Platform, we may collect:

• Full name, phone number, email address, and national ID number
• Chama or organisation name, constitution, and registration documents
• Financial data including contribution amounts, loan requests, and transaction references
• Profile photographs and identification documents (where applicable)
• Communications submitted through contact forms or support channels

1.2 Information Collected Automatically

When you use our Services, we automatically collect:

• Device identifiers, IP address, operating system, and browser type
• Usage data including pages visited, features used, and time spent on the Platform
• Geolocation data (where you have granted permission)
• Log files and error reports to maintain Platform stability

1.3 Information from Third Parties

We may receive information from payment processors (including Safaricom M-Pesa), identity verification partners, and publicly available sources to verify information you have provided.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Platform and its features
• Process financial transactions, track contributions, and manage loans
• Send you transactional notifications, reminders, and account alerts
• Respond to your enquiries and provide customer support
• Detect and prevent fraud, unauthorised access, and other illegal activity
• Comply with applicable Kenyan laws, including the Data Protection Act, 2019
• Generate anonymised aggregate analytics to improve our Services

3. Legal Basis for Processing

We process your personal data on the following grounds under the Data Protection Act, 2019:

• Performance of a contract — processing necessary to deliver the Services you have subscribed to
• Legitimate interests — fraud prevention, platform security, and service improvement
• Consent — for marketing communications and optional features
• Legal obligation — compliance with applicable laws and regulatory requirements

4. How We Share Your Information

We do not sell your personal data. We may share your data with:

• Service providers — cloud hosting, payment processing, SMS, and email services engaged by us under confidentiality agreements
• Chama administrators — your chama's designated administrators have access to member data in accordance with the Platform's role-based access controls
• Regulatory authorities — where required by law or court order
• Business successors — in the event of a merger, acquisition, or asset sale, with prior notice to you

5. Data Retention

We retain your personal data for as long as necessary to provide the Services and fulfil the purposes described in this Policy, or as required by law. Financial records are retained for a minimum of seven (7) years in accordance with Kenyan financial regulations. You may request deletion of your account data subject to these retention requirements.

6. Data Security

We implement industry-standard technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, role-based access controls, regular security audits, and multi-factor authentication for administrator accounts. No system is completely secure; please contact us immediately if you suspect any unauthorised access to your account.

7. Your Rights

Under the Data Protection Act, 2019, you have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate or incomplete data
• Request erasure of your data (subject to legal retention requirements)
• Object to or restrict certain processing activities
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time, without affecting prior processing

To exercise any of these rights, contact us at support@nuruchamani.co.ke. We will respond within thirty (30) days.

8. Cookies

The Platform uses cookies and similar tracking technologies to maintain sessions, remember preferences, and analyse usage. You may disable cookies through your browser settings, though this may affect certain features. We do not use cookies for targeted advertising.

9. Children's Privacy

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please contact us so we can delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to registered users via email or in-platform notification at least 14 days before they take effect. Continued use of the Services after the effective date constitutes your acceptance of the revised Policy.

11. Contact Us

For privacy-related enquiries or complaints:

• Data Processor: Yokasre Consulting Limited
• Email: support@nuruchamani.co.ke
• Postal Address: Nairobi, Kenya

If you are dissatisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner of Kenya.