Privacy Policy

1. Introduction

Kopa ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile loan platform and related services (collectively, the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

We collect information that you provide directly to us and information generated through your use of the Service:

3. How We Use Your Information

We use the information we collect for the following purposes:

• Processing loan applications and facilitating M-Pesa disbursals
• Verifying your identity in compliance with CBK regulations
• Calculating credit scores and determining loan eligibility
• Sending transaction notifications and repayment reminders
• Detecting and preventing fraud, money laundering, and other financial crimes
• Improving our products, services, and user experience
• Communicating with you about your account, products, and promotional offers

4. Information Sharing

We may share your information with:

• Central Bank of Kenya (CBK): As required by regulation for licensed digital credit providers
• Credit Reference Bureaus (CRBs): To report loan performance and support credit scoring
• Safaricom (M-Pesa): To facilitate loan disbursals and repayment processing
• Law Enforcement: When required by law, court order, or to protect our legal rights

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. Data Security

We implement industry-standard security measures to protect your personal information, including encryption of sensitive data in transit and at rest, access controls, regular security audits, and compliance with CBK's information security requirements. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may retain certain information as required by law or for legitimate business purposes, including CBK regulatory requirements. Loan transaction records are retained for a minimum of seven (7) years from the date of the transaction, as required by Kenyan financial regulations.

7. Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data (subject to legal obligations)
• Object to the processing of your personal data
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

8. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: