Effective date: July 25, 2022
Last updated: March 05, 2025
1. Introduction
This Notice describes how Mwalimu Biashara Limited and its affiliates and subsidiaries collect, use
and process personal information provided by all users who use and access any of the Mwalimu
Biashara Services described in the Terms and Conditions. This Notice is incorporated into the
Mwalimu Biashara’s Terms and Conditions which are set out at Terms and Conditions
Mwalimu Biashara Limited owns and operates the www.mwalimubiashara.com website and the
‘Your Financial Partners’ product and brand available on the website.
All those subject to this Notice are referred to as “users” or ‘you’ for purposes of this Notice. ‘You’
means customer-any person who has individually or through their business uses or purchases any
of our products or services; any natural person who has signed an agreement with us; any visitor
to our app, site or office. Mwalimu Biashara is referred to as ‘our’ or ‘we’.
In this Notice we will explain the following: -
- The personal data we collect and retain
- Use of cookies
- Use of third-party links
- The rights of a data subject
- How we use the data we collect
- Sharing of personal data
- Security
- Changes to this policy
It is the individual user’s responsibility to read through the provisions of this Notice in order to
gain a thorough understanding of Mwalimu Biashara’ views and practices relating to the user’s
personal data and how it will be treated.
2. Our Role as a Data Controller
Under the applicable laws, we are a ‘Controller’ for those services where we make decisions on
how personal information is used in connection with our services.
Where with your consent we share your information with our partners, facilitate engagement with
the partners and our partners offer you their services, our partners will process the data we have
shared and any other data they collect from you as the ‘Controller’ and the partner’s privacy
policies will apply.
3. How Mwalimu Biashara collects information
Mwalimu Biashara will collect information through;
- Information provided by the individual user about the user themselves (Submitted Information);
- correspondence with Mwalimu Biashara, by e-mail or instant message or chat or other means of communication.
- information which is to include information provided by the individual user when they
register to use the App Site, download or register the App, share data when subscribing to
any of Mwalimu Biashara’ Services, share data through the App’s social media capabilities,
enter a competition, promotion or survey, when the user may decide to report a problem
with an App, or Mwalimu Biashara’ Services.
- When you interact with us as a supplier, dealer or other contracted party.
- When you visit any of our premises.
- Information that is publicly available.
- Information that is provided by third parties such as identity verification services, IPRS
(Integrated Population Registration System), mobile network providers, payment services
providers, banks and any other entity from whom we may legally obtain information
necessary for the services.
4. Description of data that we collect and retain
A. Personal information
We may collect the following personal information upon registration for use of the service:-
- Full name
- Email address
- Mobile phone number which is not mandatory
- Information relating to finance and credit, your income, expenditure assets and liabilities
- Photograph.
- Age
- Target and official retirement age
- Description of your future financial plans
- Password and any other information required during the registration process.
- Your contact with us such as when you call us or interact with us through the app, over the
phone, email, social media etc. your preferences for particular products and services based
on information you provide us and from your use of our services or those of our partners.
- We may request you to share contact information, specifically the email addresses of your
chosen accountability partners who have consented to being your accountability partners
and consented to their contact information being submitted to us.
B. Information collected relating to the individual and their device
When you visit one of Mwalimu Biashara’ websites or use one of Mwalimu Biashara’ Apps, the
following information may be automatically collected:
a. information of a technical nature, to include the type of mobile device used by the user,
unique device identifiers (such as the Device’s IMEI or serial number), SIM card information,
mobile network information, the user’s device operating system, the browser which is being
utilized by the user, the location of the Device and its time zone setting (Device
Information);
b. information which is stored on the individual user’s Device, which may include but not
limited to, social media engagement, contact lists from the Device and social media
accounts, photos, videos or other digital content (Content Information);
c. information relating to the individual user’s use of any of Mwalimu Biashara’ Apps or any
visits by the user to any of Mwalimu Biashara’ websites. This includes but is not limited to
location data, traffic data, weblogs and other data (Log Information).
C. Location information
We may use GPS technology or other location services to determine your location. You may revoke
the consent to collection of location data at any time by disabling location from your device or
browser settings.
Unique application numbers
Where you decide to install or uninstall an App which contains a unique application number or
where an App searches for automatic updates, the version number in question along with
information about the user’s installation, such as the kind of operating system, may be sent to
Mwalimu Biashara.
5. Sensitive Data
We may collect special or sensitive data about you such as gender/sex and financial information.
We may also request for names and ages of your children and dependents. Where we collect such
information, we shall collect, process and store that data in accordance with the provisions of the
Data Protection Laws as provided in this Notice.
6. SMS Data
The App requires access to your SMS messages to analyze financial transactions and provide expense tracking features.
We only read SMS messages related to financial transactions (e.g., bank alerts, payment confirmations).
We do not collect or store the content of personal or non-financial SMS messages.
1.2 Device Information
We may collect device-specific information such as your device model, operating system, and unique device identifiers.
1.3 Usage Data
We collect information about how you interact with the App, such as feature usage and session duration.
6. How We Use Your Information
6.1 SMS Data
We use SMS data to:
Automatically categorize financial transactions.
Provide expense tracking and budgeting features.
Generate financial reports and insights.
6.2 Device and Usage Data
We use this information to:
Improve the App's functionality and user experience.
Troubleshoot technical issues.
Analyze app performance and usage trends.
7. Data Storage and Security
7.1 Data Storage
All SMS data is processed locally on your device and is not stored on our servers.
Aggregated and anonymized data may be stored securely for analytical purposes.
7.2 Data Security
We implement industry-standard security measures to protect your data.
Your data is encrypted during transmission and storage.
8. Data Sharing
We do not share your SMS data or personal information with third parties.
Aggregated and anonymized data may be shared with partners for analytical purposes.
9. Permissions
9.1 SMS Permission
The App requires access to your SMS messages to analyze financial transactions.
You can revoke this permission at any time through your device settings, but this may limit the App's functionality.
10. Your Rights
You have the right to:
Access, update, or delete your personal information.
Opt out of data collection by uninstalling the App.
Request a copy of your data in a readable format.
11. Children’s Privacy
Our services generally provide information on financial services and products and are intended
for individuals over eighteen (18) years of age. We do not target children and do not knowingly
collect information from children under the age of eighteen (18).
When a user discloses personal information on our services, that user is representing to us that he
or she is at least eighteen (18) years of age.
12. Tracking and Cookies
Cookies are small pieces of data, stored in text files that are stored on your device when you use
your browser to visit websites. We use cookies to ‘remember’ you and your preferences.
We may use website cookies in an effort to distinguish the individual user from other users of the
App, App Site, or Service Site. This assists us in providing you with a positive experience when you
use our website by enabling a personalized experience for you and also gives us the tools to
continuously improve the website.
You may modify your cookie preferences on the website when prompted to do so. If you delete,
or choose not to accept cookies from the Services, you may not be able to utilize the features of
the Services to their fullest potential.
13. Third- party links
Occasionally, at our discretion, we may include or offer third-party products or services on our
application or website. These third-party sites have separate and independent privacy policies. We,
therefore, have no responsibility or liability for the content and activities of these linked sites.
Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these
sites.
14. Retention of data
We only retain personal data for as long as it is necessary to do so in line with the Data Protection
Laws. This means that we retain data:
- For as long as you continue to use our services
- For any period required by law.
- For purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
- For the purposes of any legal proceedings. We may retain your personal data for a longer
period in the event of a complaint or if we reasonably believe there is a prospect of
litigation arising out of our relationship with you.
- For as long as is required for Mwalimu Biashara’ legitimate business interests.
We may hold anonymized information that is no longer associated with you indefinitely.
To determine the appropriate retention period for data, we consider the nature and sensitivity of
the personal data, the purposes for which we process the data, the potential risk or harm from
authorized use or disclosure and whether we can achieve those purposes through other means and
the need to comply with our Privacy Policies and applicable laws.
15. How do we use the personal data we collect?
We use information we collect in the following ways;
- To facilitate your access to Mwalimu Biashara services.
- Responding to any of your queries or concerns.
- Quality control and ensuring maintenance of optimal system operations.
- To understand how you use our services, products and services for purposes of developing
or improving products or services.
- Personalize and make recommendations related to our services and products including
recommendations for planning for children’s and dependents financial future (education
plans, insurance, travel & holidays plans etc), and forecasting your financial plans,
customizing and making recommendations on your savings and investment plans.
- Contact and communicate with you in connection with our services that you have
consumed, follow up on, programs or updates you may have registered for and to keep
you generally informed about our services and products.
- We may associate one or more categories of information with any other category of
information and this combined information will be treated as personal data in accordance
with the provisions set out in this notice, for as long as it is combined.
- We will use the personal data of the individual user to compile statistics regarding the
website user base. Mwalimu Biashara may decide to provide this information to any third
party for this purpose, on the condition that the information will always be anonymous.
- Keeping you informed about new products, services, news or other information related to
our services and send you offers, advertising and marketing materials including to provide
personalized advertising to you unless you opt out of receiving such marketing messages
(you may opt out of receiving such messages at any time).
- To administer our online platforms or websites.
- To comply with any legal, governmental or regulatory requirements or for use in
connection with any legal proceedings.
- For legitimate interests pursued by us where such interests are overridden by your interests
or fundamental rights and freedoms which require protection of personal information.
- Comply with your instructions or to fulfill other, specified purposes for which you have
given your consent.
- Identify and authenticate your access to our service or to identify and authenticate you
before we provide you with certain information.
- Exercise our rights and to protect others’ rights and/or property including to take action
against those that seek to violate or abuse our services.
- For research, statistical and other scientific or business purposes.
16. Rights of the user
With regards to the personal data we collect about you, as a data subject you have the following
rights;
- to be informed of the use to which your personal data is to be put;
- to access your personal data in our custody;
- to object to the processing of all or part of your personal data;
- to correct false or misleading data;
- data portability;
- withdraw consent and
- to delete any false or misleading data.
17. Exercise of the Rights of the User
In order to exercise any of the rights of the User, Mwalimu Biashara has in place procedures to
enable you to do the following;
- Access your personal data that is held by Mwalimu Biashara
- Object to processing of personal data by Mwalimu Biashara
- Correct or delete false or misleading data held by Mwalimu Biashara
- Restrict processing of personal data
- Withdraw your consent with regard to processing of your data
- Make requests related to data portability
- Share complaints
- Obtain information on automatic individual decision making.
To exercise these rights and obtain more information on the procedure please contact the data
protection officer/officer in charge through the following address: admin@mwalimubiashara.com
We will respond to all legitimate requests within a reasonable time and where we are not able to
do so due to the request being complex or comprising multiple requests, we will notify you of the
extended response time and keep you updated.
You may update and correct your data from the App or website from your device.
13. Processing of personal data
We will only process the personal data we collect based on lawful basis allowed under Data
Protection Laws being;
- Your consent
- Performance of a Contract or Agreement with you;
- To support our legitimate business interests;
- In compliance with a mandatory legal obligation;
- Your vital interest;
- Public interest.
18. Disclosure of personal data
We will not share personal information with any other individual, company or organization except
in the following cases:-
- Where we have gotten your consent;
- For legal reasons where there is a court order or a legal obligation which we have to comply
with;
- where it is necessary to do so in order to enforce the Terms and Conditions and other
agreements, or where it is necessary in order to investigate potential breaches;
- in order to publish statistics regarding the platform and website’s usage, where information
relating to users will be aggregated and made anonymous.
- to any member of our business group, which includes subsidiaries, the group’s ultimate
holding company and its subsidiaries, developers, partners who are involved in the delivery
of Mwalimu Biashara services that you use;
- where a third party acquires Mwalimu Biashara or all of its assets, where personal data
which is held on its customers will be listed as one of the assets to be transferred.
g. Mwalimu Biashara may disclose anonymous aggregate information concerning the users.
- In the event of a merger, sale or change of control, we may transfer this Privacy Notice and
your personal information to a third-party entity that acquires or is merged with us as result
of a merger, acquisition, sale or other change of control.
- Any other person we deem legitimately necessary to share the information with.
Where we share personal data in the cases listed above we take all necessary steps to ensure that:-
The data is processed lawfully;
- We only disclose what is necessary ;
- The data is kept secure and all safeguards are put in place to ensure its protection.
19. Direct Marketing
You may be required to opt in or give any other form of explicit consent before receiving marketing
messages from us. Where you opt out of receiving these marketing messages, this will not apply to
personal data provided to us as a result of a product, service already taken up.
You can request us to stop sending you direct marketing messages at any time by contacting us
through the SMS number, email address and telephone number provided in the marketing message
or by contacting us directly through admin@mwalimubiashara.com
We will not share your information with any Third Parties for marketing purposes except with
your express consent.
20. Automatic individual decision making
We recognize the right of every data subject not to be subject to a decision based solely on
automated processing, including profiling, which produces legal effects concerning or significantly
affects the data subject.
Therefore we only engage in automated processing where:-
- It’s necessary for entering into or performing a contract between you, the data subject, and
the Company.
- It is authorized by law which we are subject to and lays down suitable measures to
safeguard your rights, freedoms and legitimate interests.
- Where we have gotten your consent.
When we engage in automated processing that affects you we will notify you in writing. You then
have 7 days from the day of notification to request that we consider the decision or take a decision
that is not based solely on the automatic processing.
Once we receive that request we will consider it and notify you in writing of the steps we have
taken to comply with the request and the outcome of complying with the request.
21. Security
We have put in place technical and operational measures to protect your information from
unauthorized access, accidental loss or destruction.
We restrict access to personal information to our employees, contractors, and agents who need
that information to process it and facilitate service delivery. Anyone with this access is subject to
strict contractual confidentiality obligations.
However, we cannot ensure or warrant the security of any information provided to us by a data
subject. We do not accept liability for unintentional disclosure.
In the event of a security breach that involves a data subject’s personally identifiable information
we will communicate to the data subject in writing within a reasonably practicable period and take
all other action that is necessary to mitigate the breach.
This communication may be limited where it is necessary and appropriate for purposes of
prevention, detection or investigation of an offence.
Our security procedures also mean that we may request proof of identity before we disclose
personal information to you or before we process your other requests.
22. Where we store your data
Data which is collected by Mwalimu Biashara from the individual user may be moved to and stored
at a location outside Kenya. Staff that operate outside Kenya who are employed by Mwalimu
Biashara, any member of our business group, or one of our suppliers may be charged with
processing the data. Such staff members may be tasked with dealing with requests made by the
individual user.
Whenever we transfer personal information to other jurisdictions, we will ensure that the
information is transferred in accordance with this Privacy Notice, our privacy practices and as
permitted by applicable data protection laws.
You acknowledge that by submitting your personal data, you accept its transfer, storage or
processing.
Mwalimu Biashara will ensure, as reasonably as possible, that your personal data is treated securely
and in accordance with the provisions set out in this Privacy Notice.
We note that the passing of information over the internet is not entirely secure. While we will
endeavour to ensure that the individual user’s personal data is protected, the security of the user’s
data transmitted to our websites cannot be guaranteed. Any transmission is at the user’s risk. When
the individual user’s information has been received, we will use strict security features and
procedures in an effort to ensure that unauthorized access does not occur.
23. Complaints handling
All complaints from data subjects regarding the way data is handled will be forwarded to:
admin@mwalimubiashara.com
A complaint can be made either orally or in writing but where an oral complaint is made the
designated officer who will as soon as practicable in any case within 7 days reduce the oral
complaint into writing.
We will investigate every complaint that we receive and get back to you within 30 of receiving
the complaint.
If you are not satisfied with the findings you have the right to appeal or to lodge a complaint to
the Data Commissioner established under the Data Protection Act of Kenya, 2019.
24. Changes to this Notice
We reserve the right to update or change our Privacy Notice at any time and you should check this
Privacy Notice periodically. Your continued use of the Service after we post any modifications to
the Privacy Notice on this page will constitute your acknowledgment of the modifications and your
consent to abide and be bound by the modified Privacy Notice.
If we make any material changes to this Privacy Notice we will notify you either through the email
address you have provided us, or by placing a prominent notice on our website, on the app and/or
at our office.
25. Contact us
Any correspondence including comments, questions and requests relating to the Privacy Notice are
happily received and can be addressed to: admin@mwalimubiashara.com