Skip to content
JasiriJasiri Technologies

Privacy Policy

Last updated: 26 July 2026

This Privacy Policy explains how Jasiri Technologies (“we”, “us”, “our”) collects, uses, shares and protects your personal information when you use the M-Chama mobile applications, our website and related services (together, the “Service”). M-Chama helps chamas and other savings groups manage contributions, loans, meetings, attendance and reporting.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

1. Who we are

Jasiri Technologies is the data controller responsible for your personal data. We are based in Meru, Kenya. You can reach us at any time using the details in the Contact us section below.

2. Information we collect

Information you provide to us

  • Account & profile data — your name, email address, phone number and, where applicable, a profile photo when you register or are added to a group.
  • Group & financial records — group details, membership, contributions, savings, loans, repayments, fines, attendance and meeting records you or your group create in the app.
  • Enquiries — the name, email, phone number, group name and message you submit when you request a demo, contact support or ask us to delete your data.

Information we collect automatically

  • Device & log data — device model, operating system version, app version, unique device identifiers, IP address, crash reports and diagnostic logs.
  • Usage data — features used, actions taken and the dates and times of your activity, used to operate, secure and improve the Service.
  • Cookies & similar technologies — on our website we use essential and, with your consent, analytics cookies. You can control these through the consent banner and your browser settings.

We do not knowingly collect special categories of data (such as health, religious or biometric data) and ask that you do not submit them through the Service.

3. Device permissions

The app only requests the permissions it needs, and only at the point they are used. You can grant or revoke each permission in your device settings.

  • Camera & photos — to capture or upload a profile picture, receipts or supporting documents.
  • Storage / files — to attach documents and to save reports and statements you export.
  • Notifications — to send reminders about contributions, loan due dates, meetings and other service messages.
  • Network access — to sync your data securely with our servers.

Revoking a permission may disable the related feature but will not otherwise stop you using the Service.

4. How we use your information

  • To create and manage your account and your group’s records.
  • To provide the core features of M-Chama — savings, loans, attendance and reporting.
  • To send service messages such as SMS or push notifications, reminders and receipts.
  • To respond to your enquiries and provide customer support.
  • To secure the Service, prevent fraud and abuse, and troubleshoot problems.
  • To analyse and improve the Service and develop new features.
  • To comply with legal, tax and accounting obligations.

5. Legal bases for processing

Where applicable data-protection law requires it, we rely on the following bases:

  • Contract — to provide the Service you or your group have signed up for.
  • Consent — for optional analytics cookies and marketing messages, which you can withdraw at any time.
  • Legitimate interests — to secure, maintain and improve the Service.
  • Legal obligation — to meet regulatory, tax and accounting requirements.

6. How we share information

We do not sell your personal data. We share it only in these limited circumstances:

  • Within your group — group administrators and members can see the shared records relevant to running the group (for example contributions, loans and attendance).
  • Service providers — trusted vendors who process data on our behalf under contract, such as cloud hosting, SMS/notification delivery, crash reporting and analytics. They may only use the data to provide services to us.
  • Legal & safety — where required by law, court order or to protect the rights, property or safety of our users, the public or Jasiri Technologies.
  • Business transfers — in connection with a merger, acquisition or sale of assets, subject to this policy.

7. Data retention

We keep personal data only for as long as necessary to provide the Service and to meet legal, tax and accounting obligations. When data is no longer needed, we delete or anonymise it. Group financial records may be retained for the period required by law even after an account is closed.

8. How we protect your data

We use technical and organisational measures to protect your information, including encryption in transit, role-based and per-group access controls, and audit trails so that changes to financial records are accountable. No method of transmission or storage is completely secure, but we work to protect your data and to promptly address any incident.

9. International data transfers

Your data may be processed and stored on servers located outside your country. Where we transfer data internationally, we take steps to ensure it receives an adequate level of protection consistent with this policy and applicable law.

10. Your rights and choices

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your personal data (see the next section).
  • Object to or restrict certain processing.
  • Withdraw consent where processing is based on consent.
  • Request a copy of your data in a portable format.

To exercise any of these rights, contact us at reappletechnologies@gmail.com. We will respond within the timeframe required by applicable law.

11. Deleting your data

You can ask us to delete your personal data at any time. Submit a request through our data deletion request page or email reappletechnologies@gmail.com. We will verify your request and delete your personal data, except where we are required to retain certain records to meet legal obligations.

12. Children’s privacy

The Service is intended for users aged 18 and over and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above. Significant changes may also be communicated in the app. Your continued use of the Service after an update means you accept the revised policy.

14. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: