LEGAL

Privacy Policy

Effective Date:

Tenz Technologies respects your privacy and protects personal data processed through our websites, mobile applications, web applications, merchant portals, payment gateway services, APIs and other digital services. This Policy applies to all current and future Tenz Technologies applications and services.

01

Information We Collect

Depending on the service used, we collect information including:

  • Name
  • Telephone number
  • Email address
  • National ID or passport details
  • Business registration information
  • Location
  • IP address
  • Device identifiers and information
  • Application usage and analytics data
  • Transaction and payment information
  • Contacts
  • Photographs
  • Camera data
  • Uploaded documents
  • Authentication information
  • Biometric information, where required for an approved service

We collect only information required for a stated service, legal obligation, security requirement, transaction, authentication, customer support, analytics or other disclosed business purpose.

02

How We Use Personal Data

We process personal data to:

  • Register and authenticate users
  • Provide services
  • Process and reconcile transactions
  • Integrate with payment providers
  • Communicate with users
  • Prevent fraud
  • Meet KYC and regulatory requirements
  • Provide customer support
  • Improve application performance
  • Investigate incidents
  • Comply with legal obligations

Processing will rely on an appropriate lawful basis, including consent, performance of a contract, compliance with law and legitimate business interests where permitted.

03

Payments and Third Parties

Tenz Technologies integrates with third-party providers including:

  • M-PESA
  • Banks
  • Payment processors
  • Cloud providers
  • SMS and email providers
  • Analytics platforms
  • Firebase
  • Google services
  • Microsoft Azure
  • AWS
  • Mapping services
  • Other approved technology providers

Payment credentials and transaction information are shared only where required to initiate, verify, complete, reconcile or investigate transactions. Third-party processors are required to apply appropriate privacy and security controls.

Tenz Technologies remains responsible for reviewing the privacy impact of SDKs, APIs and third-party components integrated into its applications.

04

Device Permissions, Analytics and Tracking

Applications will request access to sensitive device capabilities such as location, contacts, camera, photos or biometrics only where required for a disclosed feature. Users will receive appropriate permission or consent requests before access where required.

Tenz Technologies will not use personal data for cross-app or cross-website tracking without the required user consent.

iOS

Apple App Tracking Transparency requirements will apply where tracking occurs.

ANDROID

Android applications will use appropriate runtime permissions and data-minimising mechanisms for sensitive permissions.

05

Storage, Security and International Transfers

Data may be hosted by approved third-party cloud providers located within or outside Kenya. Cross-border transfers will follow the Kenya Data Protection Act and applicable ODPC requirements, including appropriate safeguards, contractual controls, adequacy requirements, necessity or valid consent where applicable.

Tenz Technologies applies the following measures to protect personal data:

  • Access controls
  • Encryption in transit and, where appropriate, at rest
  • Authentication controls
  • Logging and monitoring
  • Backups
  • Secure development practices
  • Restricted administrative access
06

Data Retention and Account Deletion

Up to 5 years
NORMAL RETENTION PERIOD

Personal data will normally be retained for up to five years, subject to the approved data retention schedule and guidance from the Data Protection Officer. Data may be retained for a shorter or longer period where required by law, financial or regulatory obligations, fraud prevention, dispute resolution, contractual obligations or an approved lawful purpose.

Users may request account deletion through the application, an approved Tenz Technologies web deletion facility or by contacting Tenz Technologies. Account deletion includes deletion or anonymisation of associated personal data unless retention is legally or operationally required. Where information must be retained, users will be informed of the applicable reason.

07

Your Privacy Rights

Subject to applicable law, you have the right to:

Access
Request access to your personal data.
Correction
Request correction of inaccurate information.
Deletion
Request deletion of your personal data.
Restriction
Request restriction of processing.
Objection
Object to certain processing.
Portability
Request portability of your data.
Withdraw consent
Withdraw consent you have previously given.

You may also lodge a complaint with the Office of the Data Protection Commissioner of Kenya where you believe your personal data has been processed unlawfully.

08

Age Restriction

Tenz Technologies services are intended for persons aged 18 years and above. We do not knowingly provide accounts or services intended for persons below 18 years.

09

Application Release and Store Privacy Compliance

Before releasing or updating an application, Tenz Technologies will review its data collection, SDKs, APIs, permissions, tracking, analytics and third-party integrations.

GOOGLE PLAY

Tenz Technologies will maintain an accurate Data Safety declaration, privacy policy, account deletion mechanism and required disclosures.

APPLE APP STORE

Tenz Technologies will maintain accurate App Privacy information, privacy policy links, account deletion functionality, consent requirements, tracking declarations, SDK privacy information and applicable privacy manifests.

Material changes to data collection, processing, permissions, SDKs or sharing arrangements will trigger a privacy review and updates to applicable store disclosures before or alongside release.

10

Changes and Contact

Tenz Technologies may update this Policy when services, laws, technologies or privacy requirements change. Material changes will be communicated through our applications, websites or other appropriate channels.

For privacy enquiries, consent withdrawal, access, correction, portability or deletion requests, contact:

Tenz Technologies