Effective July 26, 2026. This explains what information we collect, how we use it, and your rights over it.
Information you give us: full name, email address, phone number, password, and — where required for verification or larger transactions — identity documents (KYC).
Financial and transaction information: wallet balance, deposit and withdrawal history, savings goals, group contributions, loan applications and repayment history, and investment holdings.
Information from third parties: confirmation of mobile money transactions from Safaricom M-Pesa, Pesapal, or KCB when you deposit or withdraw funds.
Automatically collected information: device type, IP address, and basic usage data (such as which pages or app screens you visit), used for security and to improve the Service.
We use your information to: operate your account and process transactions; verify your identity where required by law; send transactional notifications (deposit confirmations, loan approvals, security alerts) by SMS, email, and in-app notification; investigate suspected fraud or misuse; and comply with regulatory and legal obligations.
We do not use your financial data to sell you unrelated third-party advertising, and we do not sell your personal information to data brokers.
We send SMS messages (via Africa's Talking) and emails for account security, transaction confirmations, and loan/group notifications. These are transactional, not marketing, messages tied to your use of the Service. If you believe you're receiving these in error, contact Support.
We share information only where necessary to operate the Service:
We do not sell your personal information to third parties for their own marketing purposes.
We use industry-standard measures to protect your information, including encrypted password storage, secured database access, and access-gated storage for identity documents. No system is 100% secure, and we encourage you to use a strong, unique password and keep your device secure.
We retain your information for as long as your account is active, and afterward for as long as necessary to comply with legal, tax, or regulatory recordkeeping obligations for financial services.
Under the Kenya Data Protection Act, 2019, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data, subject to our legal recordkeeping obligations; and object to certain uses of your data. To exercise these rights, contact us through Support.
MAA INVEST is not intended for anyone under 18. We do not knowingly collect personal information from minors.
We may update this Privacy Policy from time to time. We will indicate the effective date at the top of this page, and will notify you of material changes through the app or by SMS/email where reasonably practicable.
For any questions about this Privacy Policy or to exercise your data rights, reach us through our Support & Help Center.