App Store Image

Privacy Policy

ZK Pesa (hereinafter referred to as the “Company” or “We”) respects our customers (hereinafter referred to as the “Customer” or “You”) and their privacy, and is committed to protecting our customers’ privacy by complying with this Privacy Policy (hereinafter referred to as the “Privacy Policy”). This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit our website or app, as well as our practices for collecting, using, maintaining, protecting, and disclosing that information. This Privacy Policy and any amendments or variations thereto take effect on their date of publication.

In order to promptly determine your qualification for a loan and speed up the release of funds, the subsequent permissions are essential.

SMS Permission Usage

With your explicit authorization, we will access the SMS content on your device inbox. The specific scope of authorization and usage rules are as follows:

Data Collection Scope

We will only retrieve SMS content directly related to financial services, limited to the most recent 100 days, including but not limited to: transaction notifications from banks and financial institutions (e.g., account balance changes, transfer confirmations), third-party payment platforms (e.g., payment receipts, billing confirmations) and service notifications from credit institutions (e.g., loan approval results, repayment reminders)

We strictly exclude the following:

  • Personal social messages
  • Commercial advertisements
  • Verification codes unrelated to financial transactions
  • Data usage notification
  • Any other non-transaction-related SMS

Data Processing Standards

We employ intelligent recognition technology to automatically filter SMS using predefined financial keywords (e.g., “balance”,“cash”,“charge”,“expiry”,“ksh”,“kes”). Only messages meeting the following criteria are processed:

  • Contain clear transaction details
  • Fall within the authorized 100-day period

Purpose of Data Usage

The collected information will be used for credit risk assessment and anti-fraud systems.

Data Security Measures

We implement SSL encryption for all data transmission and high level encryption for server storage in (https://api.zkpesa.com).

Data Retention Policy

All collected data will be:

  • Anonymized immediately after processing
  • Retained for no more than 90 days
  • Permanently deleted upon expiration

User Rights Protection

You retain full control over your data:

  • Revoke SMS access at any time via device settings
  • Request access to data usage records
  • Demand deletion of collected data (Note: Revoking permissions may affect certain service features.)

Phone and Device

We collect specific information about your device, including phone number, device name, model, region and language settings, identifiers, hardware and software information, IP address, usage habits, IMEI, and serial number. This helps ensure device security and prevent fraudulent activities.

Phone and device data will be encrypted and uploaded to our dedicated server( https://api.zkpesa.com )via the HTTPS protocol. Under no circumstances will we share this data with third parties.

Installed Applications

We collect the list of installed applications on your phone to ensure the absence of unauthorized or virus applications that may affect fund security.

Installed applications data will be encrypted and uploaded to our dedicated server(https://api.zkpesa.com ) via the HTTPS protocol. Under no circumstances will we share this data with third parties.

Contacts

We request access to your contact list to assist you in quickly inputting emergency contact details and to implement fraud prevention measures to validate the authenticity of your emergency contacts. We only collect the information of emergency contacts you designate and securely transmit it to the ZK pesa server (https://api.zkpesa.com), including their relationship to you, name, and phone number. This data is used for risk management and anti-fraud verifications. Be assured, we will never share this information with any third parties without your explicit consent.

Album Pictures

We will only access your photo albums or media library if you actively choose to do so and give your explicit consent. You can selectively upload specific photos to help us diagnose and solve problems without worrying about us scanning your entire album. The images you upload will be used strictly for our functional service improvements and will not be used for any advertising or other unrelated purposes.

To ensure your privacy and security, we share these images with trusted image processing partners and use advanced encryption technology to protect your data during transmission and storage. Once the issue has been resolved, or you have made a deletion request, we will promptly remove these images, ensuring that they are kept for only as long as necessary.

This Privacy Policy outlines the practices and procedures regarding the collection, storage, use, and protection of your Personal Information by ZK Pesa. Please carefully read and understand the following terms before using the App. By downloading and using the App, you agree to the terms outlined in this Privacy Policy.

1. Introduction:

Prior Acknowledgment and Acceptance

Before engaging with the services provided on the ZK Pesa platform, users are urged to thoroughly review and understand the terms delineated in this comprehensive Privacy Policy. This document serves as a legally binding agreement between users and ZK Pesa, delineating the parameters of data handling and user rights. By initiating the “Loan Registration” process or proceeding with transactional activities, users implicitly agree to abide by this Privacy Policy and harness the products and services offered by ZK Pesa and its partners in accordance with its provisions.

2. User Commitments:

Acknowledgment and Compliance

Users are required to unequivocally acknowledge and fully comply with all stipulations outlined within this Privacy Policy. By accessing or utilizing the ZK Pesa website/application, users affirm their understanding that any information provided may be subject to collection, processing, transfer, or storage as detailed in this policy. Furthermore, users warrant that all information furnished adheres strictly to the terms delineated in this Privacy Policy.

Additionally, users recognize and accept that ZK Pesa and/or its partners exclusively serve individuals aged eighteen (18) years or older within the Republic of Kenya. Users bear the sole responsibility of ensuring the accuracy of provided information and meeting the requisite criteria for engaging in transactions with ZK Pesa and/or its partners.

Moreover, users retain the unequivocal right to request ZK Pesa to suspend or permanently cease the collection, use, or transfer of all or some of the information previously provided, even if initial consent was granted. Such requests may be facilitated by contacting ZK Pesa’s dedicated Customer Service department.

User Consent for Information Handling

Upon downloading the ZK Pesa App, users expressly and unreservedly consent to the collection and processing of their personal information for legitimate business purposes. Such purposes may include, but are not limited to, credit assessment and loan facilitation. Users unequivocally confirm the accuracy of all provided information and acknowledge that any misrepresentation may lead to repercussions as outlined by ZK Pesa.

4. Information Gathering:

Collection of User Data

ZK Pesa adopts a meticulous approach to the collection of personal information, which may be obtained directly from users during registration and transactional activities. This information encompasses a wide array of data points, including but not limited to name, contact details, and financial data. Additionally, technical and geo-location data may be automatically collected during app usage to enhance user experience and facilitate service delivery.

5. Utilization of Personal Data:

Purposeful Use of Collected Data

Personal information collected by ZK Pesa serves a myriad of purposes, each aimed at enhancing user experience and ensuring the seamless provision of services. These purposes may include, but are not limited to, account management, loan facilitation, legal compliance, user communication, and targeted marketing endeavors designed to enrich user engagement.

6. Data Sharing Practices:

Disclosure of Personal Information

ZK Pesa exercises discretion and diligence in its approach to data sharing, ensuring that personal information is disclosed only in accordance with the provisions outlined in this Privacy Policy and in strict compliance with applicable laws and regulations. Such disclosures may involve sharing personal information with affiliates and trusted third-party partners for legitimate business purposes, including but not limited to credit assessment and service optimization.

7. Security Measures:

Ensuring Data Security

The security and confidentiality of user data are paramount to ZK Pesa, which is why stringent measures are in place to safeguard against unauthorized access, use, or disclosure of personal information. Through the implementation of state-of-the-art encryption protocols and robust security frameworks, ZK Pesa endeavors to maintain the integrity and confidentiality of user data at all times.

Furthermore, users are strongly encouraged to exercise vigilance in safeguarding their account details and passwords. Any suspected instances of unauthorized access or security breaches should be promptly reported to ZK Pesa’s dedicated Customer Service department for immediate action.

8. Data Retention Policy:

Retention of User Information

In compliance with relevant regulatory requirements, personal information associated with user accounts may be retained for a duration deemed necessary to fulfill legal obligations and facilitate seamless service delivery. Users reserve the right to request the closure of their accounts and the deletion of associated data, subject to applicable regulations and statutory requirements.

9. User Rights under Data Protection Laws:

Entitlements under Data Regulations

Users are afforded a comprehensive array of rights under data protection laws, encompassing the right to request correction, deletion, or transfer of personal data, as well as the right to withdraw consent for data processing. ZK Pesa remains committed to honoring these rights and pledges to respond promptly and comprehensively to all legitimate requests received from users.

10.Credit Information Access and Reporting Disclosure：

To ensure a responsible and personalized lending process, we may need to access your credit information. This disclosure explains how and why we handle this data. Please read the following terms carefully.

 1. Purpose of Access

We will access your credit report only when it is necessary to conduct a fair assessment of your eligibility based on your application profile. This is a standard procedure to evaluate your creditworthiness and determine the terms of service we can offer you.

 2. Information We Access

The credit report we obtain from licensed Credit Reference Bureaus (CRBs) in Kenya may include, but is not limited to, your loan history, repayment performance, personal identification details, and contact information. This information helps us form a comprehensive understanding of your financial reliability.

We may obtain your credit information from any of the licensed CRBs in Kenya, including but not limited to Creditinfo Kenya Limited, TransUnion Kenya Limited, or Metropol Corporation.

 3. Information Sharing, Security, and Data Retention Strictly with CRBs Only:

Your credit information will not be shared with any third parties other than the licensed CRBs in Kenya. We are committed to protecting your data privacy.

Data Security:

All credit data is securely stored using encryption and is accessible only to authorized personnel.

Limited Retention Period:

The credit report obtained from the CRB will be retained for up to 90 days after the credit assessment, unless you maintain an active loan relationship with us. In such cases, the data may be retained for the duration of your relationship and for up to five (5) years thereafter, in line with applicable CRB Regulations.

 4. Default Reporting

You understand and agree that if you fail to meet your payment obligations (i.e., you default), we are obligated to share accurate details of this default event with the CRBs. This reporting may impact your credit score and future ability to secure credit from other institutions.

Please note that once a default is reported to the CRBs, its retention and removal are governed by the CRB’s policies and Kenyan law, and CHAPEO CAPITAL LIMITED cannot alter or remove it.

 5. Your Rights Regarding Your Data

In accordance with the Kenya Data Protection Act, 2019, you have the right to:

  • Access and Correct your personal data we hold.
  • Request Deletion of the credit information we hold. However, we may retain part or all of the information for as long as necessary to fulfill our legal obligations, resolve disputes, or enforce our agreements.
  • Withdraw Consent at any time by contacting our Data Protection Officer, though this may affect our ability to provide credit services.
  • Lodge a Complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your data has been mishandled.

Authorization

I confirm that I have read, understood, and agree to the terms outlined in this Disclosure Regarding Credit Information.

I expressly authorize CHAPEO CAPITAL LIMITED to retrieve my credit report from a licensed Credit Reference Bureau for assessment purposes and to report my credit information to the CRBs in the event of a default, as described above.

11. Privacy Policy Updates:

Policy Revision and User Consent

ZK Pesa retains the prerogative to effect amendments to this Privacy Policy as necessary, with changes taking effect upon publication on the website/application. Users are strongly advised to periodically review the Privacy Policy to stay informed of any updates or modifications. By continuing to utilize the services offered by ZK Pesa following the implementation of such changes, users implicitly signify their consent and agreement to abide by the revised terms outlined therein.

Moreover, users reserve the right to terminate their agreement with ZK Pesa in the event of dissent or disagreement with any amendments to the Privacy Policy. Such terminations must be communicated to ZK Pesa’s dedicated Customer Service department in writing, with a seven-day notice period to allow for adequate processing and resolution of the termination request.

12. Contact Us: