TujengeEffective 1 August 2026

Privacy Policy

Rezotech Ventures built Tujenge to serve Kenyan savings groups (chamas). This policy explains what data we collect, why we collect it, and how it is protected.

Tujenge does not process payments, hold funds, or have access to your M-Pesa account. The app records reference codes that members submit manually. No money ever passes through Tujenge.

Section 1

Information we collect

When you register and use Tujenge, we collect the following:

Account information: your full name and Kenyan phone number, used to identify you within your chama.
Chama records: contribution claims you submit, including the M-Pesa reference code you provide and the amount declared.
Loan records: loan applications you submit, including the requested amount, purpose, and repayment history recorded by officials.
Device token: a Firebase Cloud Messaging (FCM) token so we can send push notifications to your device. This token identifies your device, not you personally.
Usage data: standard server logs (timestamps, API endpoints called). We do not use third-party analytics.

Section 2

How we use your information

We use the data we collect only to operate the Tujenge service:

To create and manage your account and chama memberships.
To record contributions, loans, and repayments in the group ledger.
To send push notifications about contribution verifications, loan approvals, and group activity.
To generate PDF monthly statements for your chama officials.
To allow chairpersons and secretaries to invite new members via a join code.

We do not sell your personal data. We do not use your data for advertising. We do not share your data with any third party except as described in Section 3.

Section 3

Who can see your data

Within your chama: all members can see the group balance, contribution ring, and the activity feed. Your name, phone number, and contribution history are visible to other members of any chama you belong to. Loan details are visible to chama officials (chairperson, secretary, treasurer).

Service providers: your data is stored on servers hosted by Hostpinnacle (Kenya-based cPanel hosting). Push notifications are routed through Google Firebase Cloud Messaging. These providers process data only to deliver the service and are not permitted to use it for any other purpose.

Legal requirement: we may disclose data if required to do so by Kenyan law or a valid court order.

Section 4

Data security

Passwords are stored as bcrypt hashes — we cannot read your password. All API communication is encrypted over HTTPS. Access tokens expire and are rotated using refresh tokens. Role-based access controls ensure that regular members cannot access data restricted to officials.

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately using the details in Section 7.

Section 5

Data retention

We retain your account data for as long as you maintain an account on Tujenge. Chama ledger records (contributions, loans, repayments) are retained indefinitely as an append-only audit log — they cannot be deleted even after you leave a chama, because other members' records depend on the same history.

If you request account deletion, your personal profile (name, phone, password) will be removed. Historical ledger entries will be anonymised rather than deleted to preserve the integrity of the group record.

Section 6

Your rights

You have the right to:

Access the personal data we hold about you.
Correct inaccurate information in your profile (name, phone number).
Delete your account — see our account deletion page.
Object to processing of your data in certain circumstances.

To exercise any of these rights, contact us using the details below. We will respond within 14 days.

Section 7

Contact us

For any privacy-related questions or requests:

Rezotech Ventures
Nairobi, Kenya
Email: privacy@rezotech.co.ke
Website: tujenge.rezotech.co.ke