{"policy":"Sako Yetu Mobile Application Privacy Policy\nEffective Date: September 05, 2026\nLast Updated: September 5, 2029\nSako Yetu (\"\"we,\"\" \"\"us,\"\" or \"\"our\"\") is committed to protecting the privacy and security of your personal and financial data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Sako Yetu Mobile Application (the \"\"App\"\").\n1. Information We Collect\nTo provide efficient SACCO services, mobile banking, and loan processing, we collect the following categories of data:\n    • Personal Identification Information: Name, National ID/Passport number, KRA PIN, date of birth, gender, and photograph.\n    • Contact Information: Phone number, email address, and physical/postal address.\n    • Financial Data: Bank account details, mobile money (M-Pesa) transaction history, SACCO shares, deposits, loan history, and repayment statuses.\n    • Device and Technical Data: Device ID, IP address, operating system, and mobile network information.\n    • Device Permissions (Requested only when necessary):\n        ◦ Camera/Storage: For uploading KYC documents (e.g., ID copies) or profile pictures.\n        ◦ Contacts: To facilitate easy mobile money transfers or airtime purchases to your contacts (with your explicit permission).\n2. How We Use Your Information\nWe use the collected information to:\n    • Verify your identity and manage your Sako Yetu member account.\n    • Process financial transactions, including deposits, withdrawals, and transfers.\n    • Assess loan eligibility, creditworthiness, and process loan disbursements.\n    • Send transaction alerts, security notifications, and statements.\n    • Comply with legal and regulatory obligations under the Sacco Societies Regulatory Authority (SASRA) and AML/CFT laws.\n3. Data Sharing and Disclosure\nWe do not sell your personal data. We may share your information only under the following circumstances:\n    • With Regulators & Law Enforcement: To comply with legal mandates from SASRA, the Central Bank of Kenya, or the Office of the Data Protection Commissioner (ODPC).\n    • Credit Reference Bureaus (CRBs): For credit scoring and mandatory loan reporting.\n    • Service Providers: Trusted third-party processors (such as SMS gateways or payment switches) operating under strict data confidentiality agreements.\n4. Data Security\nWe implement robust technical and organizational security measures, including end-to-end encryption (SSL/TLS) and secure user authentication (PIN/Biometrics), to protect your financial data against unauthorized access, alteration, or disclosure.\n5. Your Data Rights\nIn compliance with the Data Protection Act, you have the right to:\n    • Access the personal data we hold about you.\n    • Request correction of inaccurate or incomplete information.\n    • Request the deletion of your data (subject to legal and regulatory retention periods governing financial institutions).\n6. Childrens Privacy\nOur services are intended strictly for individuals capable of entering legally binding contracts (typically 18 years and above). We do not knowingly collect information from children.\n7. Changes to This Privacy Policy\nWe may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App and updating the \"\"Effective Date.\"\"\n8. Contact Us\nIf you have any questions or concerns regarding this Privacy Policy or your data, please contact us at:\n    • Email: NdinguriJA@proton.me\n    • Phone: 741500311 (John Ndinguri)\n    • Physical Address: Gibcon House, Nakuru."}