← Back to Home
1. Introduction
InCash ("we", "us", "our", or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our investment portfolio management platform.
2. Information We Collect
2.1 Personal Information
We collect personal information that you voluntarily provide when registering for an account, including:
- Full name
- Email address
- Phone number (including M-Pesa number)
- Date of birth
- National identification number
- Residential address
- Bank account information
2.2 Investment Information
When using our services, we collect:
- Investment history and preferences
- Portfolio composition and performance data
- Transaction history and records
- Withdrawal requests and payment information
- Referral activity and earnings
2.3 Device and Usage Information
We automatically collect certain information about your device and how you interact with our platform:
- Device type, operating system, and browser information
- IP address and geolocation data
- Pages visited and time spent on the platform
- Clicks and interactions with platform features
- Cookies and similar tracking technologies
3. How We Use Your Information
We use the collected information for the following purposes:
- Creating and maintaining your account
- Processing investment transactions and withdrawals
- Communicating with you about your account and investments
- Sending promotional emails and updates (with your consent)
- Verifying your identity and preventing fraud
- Analyzing platform usage and improving our services
- Complying with legal obligations and regulations
- Resolving disputes and providing customer support
- Marketing and advertising purposes
4. Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Contract Performance: Processing necessary to execute investment agreements with you
- Legal Obligation: Compliance with applicable laws and regulatory requirements
- Legitimate Interests: Protecting our platform, preventing fraud, and improving services
- Consent: When you explicitly agree to specific uses of your data
5. Data Sharing and Disclosure
We may share your information with:
- Service Providers: Third-party vendors who assist in payment processing, hosting, and analytics
- Payment Processors: M-Pesa and other payment gateways for transaction processing
- Legal Authorities: When required by law or court order
- Business Partners: With your consent for specific collaborative purposes
We do not sell your personal information to third parties without your explicit consent.
6. Data Security
InCash implements comprehensive security measures to protect your information:
- SSL/TLS encryption for data in transit
- AES-256 encryption for sensitive stored data
- Secure authentication mechanisms (passwords, two-factor authentication)
- Regular security audits and vulnerability assessments
- Access controls and role-based permissions
- Incident response procedures for data breaches
While we implement strong security measures, no system is completely secure. We cannot guarantee absolute security of your information.
7. Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Specifically:
- Account information: Retained while your account is active and for 7 years after closure for legal compliance
- Transaction records: Retained for 7 years as required by financial regulations
- Communication records: Retained for 3 years unless longer retention is legally required
- Usage analytics: Retained for 2 years for service improvement purposes
8. Your Rights and Choices
Depending on your location, you may have the following rights:
- Right to Access: Request a copy of your personal information held by us
- Right to Correction: Update or correct inaccurate information
- Right to Deletion: Request erasure of your data (subject to legal requirements)
- Right to Restrict Processing: Limit how we process your information
- Right to Data Portability: Receive your data in a portable format
- Right to Opt-Out: Unsubscribe from marketing communications
9. Cookies and Tracking Technologies
InCash uses cookies and similar technologies to enhance your experience:
- Session Cookies: Maintain your login session
- Preference Cookies: Remember your settings and preferences
- Analytics Cookies: Track usage patterns for improvement
- Security Cookies: Detect fraudulent activity
You can control cookie settings through your browser. Disabling cookies may affect platform functionality.
10. Third-Party Links
Our platform may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
11. Children's Privacy
InCash is not intended for users under the age of 18. We do not knowingly collect information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information promptly.
12. International Data Transfers
Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your home country. By using InCash, you consent to such transfers.
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our platform and updating the "Last Updated" date. Your continued use of InCash following such changes constitutes your acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
- Email: privacy@incash.co.ke
- Support: support@incash.co.ke
- Mailing Address: InCash, Nairobi, Kenya
15. Data Protection Officer
For inquiries related to data protection and privacy rights, you may contact our Data Protection Officer at dpo@incash.co.ke
16. Complaints
If you believe your privacy rights have been violated, you have the right to file a complaint with your local data protection authority. We encourage you to contact us first so we can attempt to resolve your concerns.