Privacy Policy for Pesa Notifier

1. Introduction

Welcome to Pesa Notifier ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Pesa Notifier (the "App"). This App is designed to help you receive and view payment notifications for your M-Pesa Store.

By using our App, you agree to the collection and use of information in accordance with this Privacy Policy. This Privacy Policy is governed by the laws of Kenya, including the Data Protection Act, 2019, and the Constitution of Kenya, 2010.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Name and contact details (phone number, email address)
• M-Pesa Store details and merchant information
• Device information (device ID, operating system, app version)
• Usage data and app interaction logs
• Location data (if you grant permission)

2.2 Payment Information

• M-Pesa transaction notifications and details
• Payment amounts, dates, and transaction references
• Customer payment information as received through M-Pesa notifications
• Store performance and transaction analytics

2.3 Technical Information

• IP address and device identifiers
• App crash reports and performance data
• Push notification tokens
• Network connection information

3. How We Collect Information

We collect information through:

• Direct input when you configure your M-Pesa Store settings
• Automatic collection during app usage
• Integration with M-Pesa notification services
• Device sensors and permissions you grant
• Third-party services integrated with the App

4. Purpose of Data Processing

We process your personal data for the following purposes:

• Service Delivery: To provide M-Pesa payment notifications and transaction viewing
• App Functionality: To configure and maintain your store notification preferences
• Security: To protect against fraud and unauthorized access
• Analytics: To improve app performance and user experience
• Communication: To send important updates about your account or the service
• Legal Compliance: To comply with applicable laws and regulations

5. Legal Basis for Processing

Under the Data Protection Act, 2019, we process your personal data based on:

• Consent: Where you have given explicit consent for specific processing activities
• Contract: To fulfill our contractual obligations in providing the App services
• Legal Obligation: To comply with legal requirements under Kenyan law
• Legitimate Interest: For improving our services and ensuring security

6. Data Sharing and Disclosure

6.1 Third-Party Services

We may share information with:

• M-Pesa and Safaricom services for transaction processing
• Cloud service providers for data storage and processing
• Analytics providers for app improvement
• Legal authorities when required by law

6.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

6.3 Legal Requirements

We may disclose your information when required by:

• Court orders or legal processes
• Government authorities under lawful requests
• Protection of our rights and safety
• Prevention of fraud or illegal activities

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and updates
• Secure data centers and infrastructure
• Employee training on data protection

8. Data Retention

We retain your personal data only for as long as necessary to:

• Provide the App services
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Fulfill legitimate business purposes

Transaction data is typically retained for 7 years in compliance with financial record-keeping requirements under Kenyan law.

9. Your Rights

10. International Data Transfers

If we transfer your data outside Kenya, we ensure adequate protection through:

• Adequacy decisions by the Data Protection Commissioner
• Standard contractual clauses
• Binding corporate rules
• Your explicit consent

11. Children's Privacy

Our App is not intended for use by children under 18 years. We do not knowingly collect personal information from children. If we discover we have collected information from a child, we will delete it immediately.

12. Cookies and Tracking Technologies

The App may use cookies and similar tracking technologies to:

• Remember your preferences and settings
• Analyze app usage and performance
• Provide personalized content
• Ensure security and prevent fraud

You can control cookie preferences through your device settings.

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time. Changes will be communicated through:

• In-app notifications
• Email notifications to registered users
• Updates posted on our website

Continued use of the App after changes constitutes acceptance of the updated Privacy Policy.

14. Contact Information

15. Complaints

16. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Kenya. Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the Kenyan courts.