PRIVACY POLICY FOR KIT IFMS

Last Updated: 2026-10-23

1. Introduction

KIT IFMS ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Integrated Financial Management System platform, including our mobile application and web services.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Name, email address, phone number
• Government-issued identification numbers (for verification purposes)
• Financial account information
• Transaction history and payment details
• Profile information and preferences

2.2 Automatically Collected Information

When you use our services, we automatically collect:

• Device information (model, operating system, unique identifiers)
• Log data (IP address, access times, pages viewed)
• Location data (with your permission)
• Usage patterns and preferences

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Verify your identity and prevent fraud
• Send you technical notices and support messages
• Respond to your comments and questions
• Analyze usage patterns to enhance user experience
• Comply with legal obligations and enforce our terms

4. Information Sharing and Disclosure

We may share your information with:

• Service Providers: Third parties who perform services on our behalf
• Financial Institutions: Banks and payment processors to facilitate transactions
• Group Members: Other members of your SACCO, cooperative, or chama (as applicable to group features)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, sale, or acquisition

4.1 Fraud Prevention and Lawful Disclosure

Effective 23 October 2026. Version 2026-10-23. This notice supplements our Privacy Policy.

We use identity documents, face-verification records, account details and transaction records to verify identity, operate financial services, prevent fraud and meet legal obligations.

If you are found to have committed fraud, or your account or a transaction is reported or reasonably suspected to involve fraud, KIT-IFMS may restrict your account, preserve relevant records and refer the matter to the police or another competent authority. Where required or permitted by law, we will forward relevant KYC identity documents, account details, transaction records and related evidence to those authorities for investigation. We share only information necessary for that lawful purpose, in accordance with the Kenya Data Protection Act, 2019. A report is an allegation, not proof of wrongdoing. Your documents will not be published or shared without restriction with the person who reports you. Knowingly making false or malicious fraud reports is prohibited.

Relevant records may be preserved during investigations or where legally required. Access is limited to authorised personnel and competent authorities for a lawful purpose. Contact support@kit-ifms.com about your data rights, subject to applicable legal restrictions.

See also our Terms of Service.

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest
• Regular security audits and assessments
• Access controls and authentication mechanisms
• Secure data centers and infrastructure

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

You have the right to:

• Access and update your personal information
• Request deletion of your data (subject to legal requirements)
• Opt-out of marketing communications
• Disable location services
• Request a copy of your data

7. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. Transaction records may be retained for up to 7 years as required by financial regulations.

8. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Support: support@kit-ifms.com
General & Contact: admin@kit-ifms.com
Email: kit.ifms@gmail.com
Address: KIT IFMS, Nairobi, Kenya