Privacy Policy for Kikundify App
Effective Date: 16 April 2026
Last Updated: 16 April 2026
1. Introduction
Kundi Assets Ltd (the “Company”, “we”, “us”, or “our”), operating under the brand Kikundify, respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Kikundify App (the “App”) and related services (collectively, the “Service”).
By downloading, registering, or using the App, you agree to the collection and use of your information in accordance with this policy.
2. What Information We Collect
We collect only the information necessary to provide and improve the Service. This includes:
- a) Information You Provide Directly
- Identity and contact data: full name, national ID number, phone number, email address, physical address (optional).
- Profile data: username, password, chama membership details, contribution records, welfare and goal savings, advance requests and repayments.
- Payment data: M‑PESA transaction details (amount, date, reference) for deposits and withdrawals.
- b) Information Collected Automatically
- Device information: IP address, device model, operating system version, Android ID, Firebase installation ID, screen resolution.
- Usage data: how you interact with the App (features used, timestamps, error logs).
- Approximate location (only with your explicit consent) – used for fraud prevention and security.
- c) SMS Data (Optional – Galaxy Store Version Only)
If you install the App from the Samsung Galaxy Store and give explicit consent, we may read financial transaction SMS messages (e.g., M‑PESA payment confirmations) to improve your experience. We do not read personal or non‑financial SMS. You can refuse or revoke this permission at any time. - d) Cookies and Similar Technologies
We use cookies and local storage to remember your preferences and improve performance. You may disable cookies in your device settings, but some features may not work properly.
3. How We Use Your Information
We use your information for the following purposes:
- To create and manage your account and chama groups.
- To process M‑PESA deposits and withdrawals.
- To send you important notifications, including SMS reminders (0.40 KES per SMS) and email alerts.
- To maintain and improve the App’s functionality and security.
- To comply with legal obligations, such as anti‑money laundering and know‑your‑customer requirements.
- To prevent fraud and unauthorised access.
We will not use your personal data for any other purpose without your prior consent.
4. How We Share Your Information
We do not sell or rent your personal data. We may share your information only in the following limited circumstances:
| Recipient Category | Purpose | Data Shared |
|---|---|---|
| M‑PESA (Safaricom) | Process deposits and withdrawals | Phone number, amount, transaction reference |
| SMS service provider | Send SMS reminders | Phone number |
| Email service provider | Send account notifications | Email address |
| Cloud hosting provider | Store data securely (encrypted) | All personal data (encrypted) |
| Analytics provider | Improve App performance and features | Device and usage data (anonymised) |
| Law enforcement or regulators | Comply with legal obligations | As required by law |
We may also share aggregated, anonymised statistics for research or marketing purposes – such data cannot identify you personally.
5. Data Security
All data transmitted between your device and our servers is encrypted using 256‑bit SSL/TLS (HTTPS). Data stored on our servers is encrypted at rest. Access to your personal data is restricted to authorised personnel who need it to operate, develop, or improve the Service.
You are responsible for keeping your account password and device secure. Notify us immediately at hi@kikundify.com if you suspect any unauthorised access.
6. Data Retention
We will retain your personal data only as long as necessary for the purposes described, or as required by law. Typically:
- Active accounts: data retained for the duration of your use.
- Closed accounts: data kept for up to seven (7) years after closure to comply with legal obligations.
- SMS logs and transaction records: retained for five (5) years unless a longer period is required by law.
After the retention period, your data will be securely deleted or anonymised.
7. Your Rights
Under Kenyan data protection law (Data Protection Act, 2019) and the GDPR where applicable, you have the following rights:
- Access: request a copy of the personal data we hold about you.
- Correction: ask us to correct inaccurate or incomplete data.
- Deletion: request deletion of your data, subject to legal retention obligations.
- Restriction: ask us to temporarily stop processing your data.
- Objection: object to processing based on legitimate interests.
- Portability: request a machine‑readable copy of your data to transfer to another service.
- Withdraw consent: where processing is based on your consent, you may withdraw it at any time.
To exercise any of these rights, contact our Data Protection Officer at hi@kikundify.com. We will respond within one month.
8. Account Cancellation and Deletion
You may request to close your account and delete your personal data at any time by:
- Using the in‑app “Delete Account” feature (available in Settings), or
- Sending an email to hi@kikundify.com with the subject “Account Deletion Request”.
We will process your request within 30 days. Certain transaction records may need to be retained for legal compliance (see section 6).
9. Children’s Privacy
The App is not intended for persons under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us immediately.
10. Third‑Party Links
The App may contain links to external websites or services (e.g., M‑PESA payment pages). We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies.
11. Changes to This Privacy Policy
We may update this privacy policy from time to time. If we make material changes, we will notify you by email or by displaying a prominent notice in the App before the changes take effect. The “Last Updated” date at the top indicates when it was last revised. Your continued use of the App after any changes constitutes your acceptance of the new policy.
12. Contact Us
Kundi Assets Ltd
Email: hi@kikundify.com
Phone / WhatsApp: 0786777000
Data Protection Officer: hi@kikundify.com