Privacy Policy

Who we are

BOMAKUU (“we”, “us”) operates a members-only platform for daily participatory fees and collective investment. This policy explains what information we collect from members and staff, why we collect it and how it is protected. Questions can be sent to info@bomakuutrust.org.

Information we collect

• Account details: name, email address, phone number and password.
• Membership and KYC details: national ID number, gender, date of birth, county, constituency, ward, occupation, next of kin and beneficiary details.
• Identity documents: passport photo and photographs of the front and back of your ID.
• Payment records: contributions, subscription fees, M-Pesa transaction references, receipts and statements.
• Support information: tickets, messages and follow-up notes you send us.
• Technical information: device and browser details, push-notification tokens (only if you enable notifications) and security logs such as sign-in verification events.

How we use it

• To verify your identity and admit you into a participatory-fee cohort.
• To record contributions, issue receipts and produce your statement of account.
• To process M-Pesa payments you initiate through the app.
• To send you service messages: payment confirmations, reminders and account updates.
• To answer your support requests.
• To protect member funds through audit logs and staff verification.

We do not sell your personal information and we do not use it for third-party advertising.

Who can see your information

Your records are visible to you and to authorised BOMAKUU staff who need them for their role — for example finance officers recording payments, or support agents answering your ticket. Staff access is role-based, logged, and protected by two-step verification.

We share limited data with the service providers that run the platform: our hosting and database provider, Safaricom M-Pesa (for payments you initiate), our email delivery provider (for account emails) and Google Firebase (for push notifications, if enabled). We may also disclose information where the law requires it.

Storage and security

Identity documents are stored in private, access-controlled storage — they are never publicly accessible. Data is transmitted over encrypted connections, database access is protected by row-level security rules, and administrative actions are recorded in an audit log.

How long we keep it

We keep membership and financial records for as long as you are a member and afterwards for the period required for financial record-keeping and legal obligations. Support messages and security logs are retained for a shorter operational period.

Your choices

• You can view and update most of your profile details in the app at any time.
• You can turn push notifications on or off from your device and from the app.
• You can request a copy of your statement and receipts from your account.
• You can ask us to correct or delete information by contacting info@bomakuutrust.org. Some financial records must be retained for compliance even after an account is closed.

Children

The platform is intended for adults. We do not knowingly create accounts for minors.

Changes to this policy

If we make material changes we will update this page and, where appropriate, notify members in the app.

Contact

Email info@bomakuutrust.org or call +254 119 298 309. See also our Terms & Conditions.