Privacy Policy

Your privacy, while using Kosalo

Last updated: 15th September 2026

Welcome to Kosalo. This policy explains what information we collect, how we use it, and the choices you have — whether you’re saving with a Table Banking, Merry-Go-Round, or Hybrid group.

At a glance

  • We collect only what’s needed to run your account and your group’s records.
  • We never sell your personal information.
  • Only you can see your own financial data; your group secretary can see full group reports.
  • Photos scanned by the AI Assistant are used only to digitize your records.
  • You can request access, correction, or deletion of your data at any time.

1. Information we collect

Personal information

When you sign up, join a group, or join our waiting list, we may collect:

  • Full name
  • Email address
  • Phone number
  • Group or organization name, and group type (Table Banking, Merry-Go-Round, or Hybrid)
  • Other information you voluntarily provide

Payment information

If you or your group subscribes to a paid plan, payments are processed by our payment partner, Paystack. Kosalo does not store your full card or mobile money credentials — Paystack handles and secures that information directly. We retain a record of transaction status (paid, pending, expired) and receipt details to manage your subscription.

Usage information

We may automatically collect certain information when you interact with our website or mobile app, including device information, browser type, IP address, and app usage data. This helps us improve the performance and security of our services.

Device permissions

Notifications: Kosalo requests permission to send push notifications so you’re alerted when your financial records are updated, when a secretary records a transaction on your behalf, or when there’s an important update related to your group. You can manage or disable notifications at any time through your device settings.

Camera and photo gallery: When you use the AI Assistant feature, Kosalo requests access to your device camera and photo gallery so you can scan physical record books. This access is used only when you actively start the AI scanning feature, and the images are used only to digitize your group’s contribution and loan records. Kosalo does not use these photos for any other purpose.

All device permissions are requested only when the relevant feature is first used, and are optional. You may deny or revoke them at any time through your device settings, though doing so may limit certain features.

Cookies (website)

Our website (kosalo.co.ke) uses cookies to keep the site working correctly and to understand how visitors use it, such as basic analytics on which pages are viewed. You can control or disable cookies through your browser settings; some parts of the site may not work as intended if you do.

2. How we use your information

  • Provide and improve our services
  • Process and manage subscription payments via Paystack
  • Respond to inquiries and support requests
  • Improve platform functionality and security
  • Communicate important updates via in-app notifications and email
  • Enable AI-assisted record scanning when you use the AI Assistant feature

We do not sell your personal information to third parties.

3. Data sharing

Kosalo may share limited information with trusted service providers that help us operate our services, such as:

  • Hosting providers
  • Paystack, for payment processing
  • Email communication services
  • Analytics tools
  • AI processing services used to power the AI Assistant scanning feature

These providers are required to keep your information secure and confidential, and to use it only for the purpose we’ve engaged them for. Images captured via the AI Assistant are processed solely to digitize your records and are not used for any other purpose.

Some of these providers may process data outside Kenya. Where that happens, we take reasonable steps to ensure your information continues to receive a comparable standard of protection to what this policy describes.

4. Data security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, or disclosure. All user data is encrypted, and each user can only access their own financial data. Only the secretary of a group has access to full member reports.

5. How long we keep your information

We keep your personal information for as long as your account is active, so we can continue providing the service. If you delete your account or leave a group, we retain a limited record for a reasonable period afterward — for example, to resolve disputes, keep accurate financial history for the group you were part of, or meet legal and accounting obligations. After that period, information is deleted or anonymized.

Note: this section states our general approach. We recommend confirming a specific retention schedule.

6. Your rights

Under the Kenya Data Protection Act, 2019, and this policy, you have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or outdated data
  • Request deletion of your data
  • Withdraw consent for device permissions at any time through your device settings
  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your data has been mishandled

To make a request, contact us at support@kosalo.co.ke.

Note: we’ve added the Kenya Data Protection Act / ODPC reference above since Kosalo processes Kenyan users’ financial data and the previous version didn’t name the applicable law.

7. Children’s privacy

Kosalo services are not intended for children under the age of 18. We do not knowingly collect personal information from children.

8. Changes to this policy

Kosalo may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the platform after updates constitutes acceptance of the revised policy.

Questions about this policy?

Reach out and we’ll get back to you.

Email support@kosalo.co.ke