Privacy policy
1. What this covers
This policy describes how SaccoSphere Ltd (“SaccoSphere”, “we”) handles personal data in connection with this website, the member app, and the SACCO/platform administration portals. It does not describe how an individual SACCO handles member data as its own data controller — see section 6.
2. What we collect
Account details (name, phone number, email, national ID for KYC), device and app-usage data, and transaction metadata necessary to operate savings, loan and dividend records on behalf of a SACCO. We do not collect more than a SACCO’s own regulatory obligations require.
3. How we use it
To operate the platform a SACCO has engaged us to run: processing deposits and disbursements, underwriting loans, generating statements and regulatory returns, and securing accounts (fraud detection, audit logging).
4. Who we share it with
Your own SACCO (the data controller for your membership), payment processors (M-Pesa/Safaricom) strictly to execute a transaction you initiated, and credit bureaus (Metropol) only in connection with a loan application you submitted. We do not sell personal data.
5. Your rights
Under the Data Protection Act 2019, you may request access to, correction of, or erasure of your personal data, subject to a SACCO’s own regulatory retention obligations. Requests go to the contact below.
6. Each SACCO is its own data controller
SaccoSphere is a data processor acting on each SACCO’s instructions. A SACCO’s member data is never used for the benefit of another SACCO on the network without that member’s own, separate consent.
7. Contact
Data protection inquiries: anthony@saccosphere.co.ke