Privacy Policy

Last updated: September 2026

This policy explains what personal data NYOTAFUNDS LOANS (“we”, “us”) collects when you use our Android application and this website, why we collect it, and the choices you have. We are the data controller for that information.

1. Information we collect

Identity and contact details — your name, national ID number, date of birth, phone number and M-Pesa number.
Profile and financial details — your employment or business details, income range and the information you provide so we can assess a loan limit.
Loan and transaction records — the amounts you request, the terms you accept, and the payments made to your account.
Device and technical data — device model, operating system version, app version, IP address and general location derived from it.
Advertising identifiers — the app shows advertising and uses advertising identifiers supplied by the operating system, where permitted.

2. Why we use it

To create your account and verify your phone number.
To assess your application and set your loan limit.
To disburse funds and process repayments through M-Pesa.
To meet legal and regulatory obligations that apply to lenders.
To detect and prevent fraud, and to keep the service secure.
To provide support when you contact us.

3. Sharing

We share data only where it is necessary: with payment providers to move money over M-Pesa, with credit reference and fraud-prevention services where the law permits or requires it, with advertising partners in the limited form described above, and with service providers who host and operate our systems on our behalf. We do not sell your personal data.

4. Security

Data is transmitted over encrypted connections and stored on access controlled systems. We restrict access to staff and contractors who need it to do their work. No system is perfectly secure, but we take these measures seriously and review them.

5. Retention

We keep your information for as long as you have an account and for as long afterwards as we are required to by law, after which it is deleted or anonymised.

6. Your rights

Subject to the Data Protection Act, 2019 you may ask for a copy of the data we hold about you, ask us to correct anything that is wrong, ask us to delete data we no longer have a lawful reason to keep, or object to particular uses. Write to support@kopamzuka.co.ke and we will respond within the period the law allows.

7. Children

The service is for adults. We do not knowingly collect data from anyone under 18, and accounts found to belong to a minor are closed.

8. Changes

If this policy changes materially we will update the date at the top of this page and, where appropriate, tell you in the app.

9. Contact

Questions about this policy, or about your data, can go to support@kopamzuka.co.ke or +254 700 000 000.