Privacy Policy

1. Introduction

Expendo ("we", "us", or "our") values your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the Data Protection Act, 2019 (Kenya).

2. Information We Collect

We collect the following types of data:

• Personal Data: Name, email, phone number, national ID, etc.
• Group Data: SACCO name, member lists, contributions, loans.
• Usage Data: Device information, browser type, log files, etc.

3. How We Use Your Information

We use your information to:

• Provide and manage the Platform.
• Communicate with users and SACCO administrators.
• Comply with legal obligations.
• Improve and personalize user experience.

4. Sharing of Information

We do not sell your personal data. We may share data with:

• Third-party service providers under confidentiality agreements.
• Legal or regulatory authorities upon valid request.
• SACCO administrators (for member-related data).

5. Data Security

We use commercially reasonable safeguards to protect your information but cannot guarantee absolute security.

6. Your Rights

Under Kenyan law, you have the right to:

• Access your personal data.
• Correct or delete inaccurate data.
• Object to data processing.
• Withdraw consent.

7. Data Retention

We retain your information as long as necessary for legal, operational, or regulatory reasons.

8. Children’s Privacy

Our services are not intended for individuals under 18 without parental consent.

9. Changes to This Policy

We may update this Privacy Policy. Material changes will be notified through the Platform or via email.