01
Information We Collect
Depending on the service used, we collect information including:
We collect only information required for a stated service, legal obligation, security requirement, transaction,
authentication, customer support, analytics or other disclosed business purpose.
02
How We Use Personal Data
We process personal data to:
- Register and authenticate users
- Provide services
- Process and reconcile transactions
- Integrate with payment providers
- Communicate with users
- Prevent fraud
- Meet KYC and regulatory requirements
- Provide customer support
- Improve application performance
- Investigate incidents
- Comply with legal obligations
Processing will rely on an appropriate lawful basis, including consent, performance of a contract, compliance with law
and legitimate business interests where permitted.
03
Payments and Third Parties
Tenz Technologies integrates with third-party providers including:
Payment credentials and transaction information are shared only where required to initiate, verify, complete, reconcile
or investigate transactions. Third-party processors are required to apply appropriate privacy and security controls.
Tenz Technologies remains responsible for reviewing the privacy impact of SDKs, APIs and third-party components
integrated into its applications.
04
Device Permissions, Analytics and Tracking
Applications will request access to sensitive device capabilities such as location, contacts, camera, photos or
biometrics only where required for a disclosed feature. Users will receive appropriate permission or consent requests
before access where required.
Tenz Technologies will not use personal data for cross-app or cross-website tracking without the required user consent.
iOS
Apple App Tracking Transparency requirements will apply where tracking occurs.
ANDROID
Android applications will use appropriate runtime permissions and data-minimising mechanisms for sensitive permissions.
05
Storage, Security and International Transfers
Data may be hosted by approved third-party cloud providers located within or outside Kenya. Cross-border transfers will
follow the Kenya Data Protection Act and applicable ODPC requirements, including appropriate safeguards, contractual
controls, adequacy requirements, necessity or valid consent where applicable.
Tenz Technologies applies the following measures to protect personal data:
- Access controls
- Encryption in transit and, where appropriate, at rest
- Authentication controls
- Logging and monitoring
- Backups
- Secure development practices
- Restricted administrative access
06
Data Retention and Account Deletion
Up to 5 years
NORMAL RETENTION PERIOD
Personal data will normally be retained for up to five years, subject to the approved data retention schedule and
guidance from the Data Protection Officer. Data may be retained for a shorter or longer period where required by law,
financial or regulatory obligations, fraud prevention, dispute resolution, contractual obligations or an approved lawful
purpose.
Users may request account deletion through the application, an approved Tenz Technologies web deletion facility or by
contacting Tenz Technologies. Account deletion includes deletion or anonymisation of associated personal data unless
retention is legally or operationally required. Where information must be retained, users will be informed of the
applicable reason.
07
Your Privacy Rights
Subject to applicable law, you have the right to:
Access
Request access to your personal data.
Correction
Request correction of inaccurate information.
Deletion
Request deletion of your personal data.
Restriction
Request restriction of processing.
Objection
Object to certain processing.
Portability
Request portability of your data.
Withdraw consent
Withdraw consent you have previously given.
You may also lodge a complaint with the Office of the Data Protection Commissioner of Kenya where you believe your
personal data has been processed unlawfully.
08
Age Restriction
Tenz Technologies services are intended for persons aged 18 years and above. We do not knowingly provide accounts or
services intended for persons below 18 years.
09
Application Release and Store Privacy Compliance
Before releasing or updating an application, Tenz Technologies will review its data collection, SDKs, APIs, permissions,
tracking, analytics and third-party integrations.
GOOGLE PLAY
Tenz Technologies will maintain an accurate Data Safety declaration, privacy policy, account deletion mechanism and
required disclosures.
APPLE APP STORE
Tenz Technologies will maintain accurate App Privacy information, privacy policy links, account deletion
functionality, consent requirements, tracking declarations, SDK privacy information and applicable privacy
manifests.
Material changes to data collection, processing, permissions, SDKs or sharing arrangements will trigger a privacy review
and updates to applicable store disclosures before or alongside release.
10
Changes and Contact
Tenz Technologies may update this Policy when services, laws, technologies or privacy requirements change. Material
changes will be communicated through our applications, websites or other appropriate channels.
For privacy enquiries, consent withdrawal, access, correction, portability or deletion requests, contact: