sacco logo

Privacy Policy for Shukran Platform

Effective Date: February 1, 2024

  1. 1. Introduction:

    Shukran is a Kenyan fintech company that provides a platform for users to digitally tip workers in the service industry. We are committed to protecting the privacy of our users and respecting their personal data. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website, mobile application, and related services (collectively, the "Services").

  2. 2. Information We Collect:

    We collect different types of personal data from you depending on how you interact with the Services. This may include:

    a. Personal Information: Name, email address, phone number, physical address, date of birth, gender, nationality, and other identifying information you provide.

    b. Account Information: Username, password, and other information associated with your account.

    c. Financial Information: Payment information, transaction history, and other financial data related to tipping and other financial activities.

    d. Usage Data: Information about how you use the Services, such as browsing history, search queries, IP address, device type, operating system, and location data (with your consent).

    e. Social Media Information: If you choose to connect your social media account to your Service account, we may collect information from your social media profile.

  3. 3. How We Use Your Information:

    We use your personal data for the following purposes:

    a. To provide and improve the Services: We use your information to operate, maintain, and improve the Services, including processing transactions, facilitating tipping, and providing customer support.

    b. To personalize your experience: We use your information to personalize your experience on the Services, such as recommending relevant service providers and offering targeted promotions.

    c. To comply with legal obligations: We may use your information to comply with applicable laws and regulations, including responding to legal requests and preventing fraud.

    d. For other purposes with your consent: We may use your information for other purposes with your specific consent, such as sending you marketing communications or conducting surveys.

  4. 4. Legal Basis for Processing:

    We process your personal data based on the following legal grounds:

    i. Consent: You can withdraw your consent at any time by contacting us.

    ii. Contractual obligations: To fulfill our contractual obligations to provide the Services.

    iii. Compliance with legal obligations: To comply with applicable laws and regulations.

    iv. Legitimate interests: To pursue our legitimate business interests, such as improving the Services and preventing fraud.

  5. 5. Disclosure of Your Information:

    We may disclose your personal data to the following third parties:

    a. Service providers: We may share your information with third-party service providers who help us operate the Services, such as payment
    processors, data analytics providers, and customer support providers.

    b. Legal authorities: We may disclose your information to law enforcement agencies or other government officials if required by law or to protect our rights or the rights of others.

    c. Business partners: We may share your information with business partners in connection with joint offerings or marketing initiatives, but only with your consent.

    d. Other third parties: We may share your information with other third parties with your specific consent or as permitted by law.

  6. 6. Data Retention:

    We will retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

  7. 7. Security:

    We take reasonable measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

  8. 8. International Transfers:

    Your personal data may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your own. By using the Services, you consent to the transfer of your personal data to these countries.

  9. 9. Your Rights:

    You have the following rights regarding your personal data:

    Access: You have the right to access and request a copy of your personal data held by us.

    Rectification: You have the right to request the correction of any inaccurate or incomplete personal data.

    Erasure: You have the right to request the erasure of your personal data under certain circumstances.

    Restriction of Processing: You have the right to request the restriction of the processing of your personal data.

    Objection: You have the right to object to the processing of your personal data.

    Data Portability: You have the right to request the transfer of your personal data to another controller.

    Withdrawal of Consent: You have the right to withdraw your consent to the processing of your personal data at any time.

    To exercise your rights, please contact us using the information provided below.

  10. 10. Children's Privacy:

    The Services are not intended for children under the age of 18. We do not knowingly collect personal data from children under 18. If you are a parent or guardian and you believe that your child has provided us with personal data, please contact us so that we can delete it

  11. 11. Changes to this Privacy Policy:

    We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on our website and app.

  12. 12. Contact Us:

    If you have any questions about this Privacy Policy or your data, please contact us at:


    Address: 29 Westlands Avenue, Nairobi

  13. 13. Additional Provisions:

    Data Subject Access Requests (DSARs): We will respond to DSARs within 30 days of receiving your request.

    Cookies and Tracking Technologies: We use cookies and other tracking technologies to collect data about your use of our Platform. You can control your cookie preferences through your browser settings.