Nyanyuka
Privacy policy
This page says what we collect when you use Nyanyuka, why, who it goes to, how long we keep it, and what you can ask of us. We collect only what running your savings account needs. We never sell your data and we do not show you advertising.
What we collect
| What | Why |
|---|---|
| Your phone number and first name | To open your account, sign you in with SMS codes, and show your name to the people you invite or save with. |
| Your PIN | To confirm money movements. It is stored only as a one-way hash: no one at Nyanyuka can read it. |
| Your last name, national ID number and a photo of your ID (only if you verify your identity) | To check who you are before larger withdrawals and some services, as financial services must. The ID number is encrypted; the photo is stored encrypted and seen only by staff allowed to check it, and every view is recorded. |
| Your transactions: savings, withdrawals, goals, chama contributions, rewards, shares | To keep your account, show your history and statements, and keep our books correct. |
| Who invited you, and who joined with your number | To pay invite rewards and show you your people. |
| Your phone: an ID the app makes for this installation, the app version and, if you allow notifications, a notification token | To keep your account safe on the phones you use, and to send you notifications. |
| The network address and app details of sign-ins and security events | To protect your account against fraud and misuse. |
| What you write to support | To answer you. |
The app uses the camera only when you choose to photograph your ID. It does not read your contacts, your photos, your messages or your location.
Who sees it
- Other members see only your first name: the person who invited you, the people who join with your number, the members of a chama you join (with your contributions in that chama), and the invite leaderboard if you leave “Show me on the leaderboard” on (in the app, Me).
- Paystack processes M-Pesa payments and payouts: it receives your phone number and the amount.
- Africa's Talking sends our SMS and runs USSD: it receives your phone number and the message.
- Google Firebase Cloud Messaging delivers notifications to your phone: it receives the notification token and the message.
- Share purchases are placed with our broker together, in Nyanyuka's name. Your personal details are not sent to the broker.
- Authorities, when the law requires it (for example the Central Bank of Kenya, the Financial Reporting Centre or a court order).
Staff see personal data only as their role needs. What they open is logged.
How long we keep it
- While your account is open, and after you close it for as long as the law requires financial records to be kept (at least 7 years for transactions and identity checks). We do not use it for anything else in that time.
- Security records and phone details are kept for as long as they help protect accounts, and then deleted.
Your rights
Under the Kenya Data Protection Act, 2019 you can ask to see the data we hold about you, to correct it, or to have it deleted where the law does not require us to keep it. You can close your account yourself in the app (Me → Close my account): see how to close your account. You can also complain to the Office of the Data Protection Commissioner (odpc.go.ke).
Security
Data travels encrypted (HTTPS). Sensitive details are encrypted when stored. Money movements need your PIN, and a new phone must be confirmed by SMS before money can leave the account.
Children
Nyanyuka is for adults: you need a Kenyan national ID to use money services beyond saving.
Contact
Questions about your data: call Nyanyuka support on 0705 757 151, or ask in the app (Me → Help & support).
If this policy changes, we update the date above, and tell you in the app when the change matters to you.