Privacy Policy

Last updated: 25 September 2026

1. Who we are

Mobikuza Technologies Ltd, Company Reg. No. PVT-JPJTEBY, Contrust House, Moi Avenue, Nairobi, Kenya. For privacy questions and our data protection contact, email info@mobikuza.com or call +254 745 720800.

2. Our role

• For businesses using our WhatsApp Business Platform, Mobikuza is a data processor, acting on the business's instructions.
• Each business is the data controller for its own customers.
• For our own website visitors and business account holders, Mobikuza is the data controller.

3. What data we collect

• From WhatsApp, when a customer messages a business using our platform: phone number, WhatsApp profile name, message content, answers they give (such as preferred date or location), and message delivery status.
• Payment details: M-Pesa transaction reference, amount and phone number. We never collect M-Pesa PINs.
• Business account holders: name, email, phone and login activity.
• Website visitors: details you submit through our contact form and basic analytics, if used.

4. How we use it

• to reply to customers and complete bookings or payments on behalf of the business;
• to send receipts and service messages;
• to show businesses their customers, enquiries and payments;
• to calculate messaging costs;
• to keep the service secure;
• to meet legal obligations.

5. What we don't do

We do not sell personal data and we do not use it for advertising.

6. Who we share it with

We share data only with service providers needed to run the service:

• Meta Platforms (WhatsApp messaging);
• Safaricom (M-Pesa payments);
• our cloud hosting provider;
• Akiba360, for SACCO members only.

7. International transfers

WhatsApp messages are processed by Meta outside Kenya, with appropriate safeguards under the Data Protection Act, 2019.

8. How long we keep data

• Messages are kept according to the business's plan, between 90 days and 1 year.
• Payment records are kept for 7 years for tax and legal reasons.
• Data is deleted or anonymised after that.

9. Security

We use encryption in transit and at rest, access controls, and audit logs. Each business's data is kept separate and is only available to that business.

10. Your rights

Under Kenya's Data Protection Act, 2019 you have the right to access, correct and delete your data, and to object to its processing. You may also complain to the Office of the Data Protection Commissioner (ODPC).

11. Marketing messages

Businesses may only send promotional messages to customers who have agreed. Customers can reply STOP at any time.

12. How to delete your data

See our Data Deletion Instructions.

13. Contact and updates

Questions about this policy: info@mobikuza.com. We will post any changes on this page and update the date above.