Legal & Policies

1. Introduction

This Privacy Policy explains how Msomi collects, uses, stores, and protects personal information when you use the Msomi Parent App. The App is designed for parents and guardians to manage student digital wallets, top-ups, spending limits, card controls, and transaction history linked to approved schools and merchants.

2. Information We Collect

We may collect the following categories of information:

• Account information: name, email address, phone number, login credentials, and profile details.
• Student information: student names, school associations, grade or class details, wallet balances, card status, and spending limits.
• Financial and transaction data: wallet top-up amounts, payment references, M-Pesa or other mobile-money transaction details, purchase history from NFC tap-to-pay, and related receipts.
• Device and technical data: device model, operating system version, app version, IP address, crash logs, performance diagnostics, and identifiers needed for security and fraud prevention.
• Communications: messages you send to our support team and records of support interactions.
• Usage data: how you interact with the App (screens viewed, features used, session duration).

We do not intentionally collect sensitive categories of data beyond what is necessary to provide school finance and wallet services.

3. How We Use Your Information

• Create and manage your parent account and authenticate your sessions.
• Process wallet top-ups and display transaction and balance information.
• Apply spending limits, balance alerts, and card freeze or replacement requests you initiate.
• Send service notifications, security alerts, and low-balance reminders where enabled.
• Detect, investigate, and prevent fraud, abuse, or unauthorized access.
• Provide customer support and respond to your enquiries.
• Comply with applicable laws, regulations, court orders, and lawful requests from authorities.

4. Legal Bases for Processing

We process personal data based on: performance of our contract with you; your consent; our legitimate interests in operating a secure financial platform; compliance with legal obligations; and protection of vital interests where applicable.

5. How We Share Information

• Schools and educational partners linked to your student accounts, as required to operate wallet and card programmes.
• Approved merchants only to the extent necessary to process tap-to-pay transactions.
• Payment processors such as mobile-money providers (including Safaricom M-Pesa) to execute top-ups and settlements.
• Cloud and infrastructure providers that host our systems under strict confidentiality and security obligations.
• Analytics and crash-reporting services (for example Firebase) to monitor app stability and performance.
• Professional advisers and authorities where required by law or to protect rights, safety, and security.

We do not sell your personal information to third parties for their independent marketing purposes.

6. Data Retention

We retain personal information for as long as your account is active and as needed to provide services, resolve disputes, enforce agreements, and meet legal, tax, and accounting requirements. Transaction records may be retained for longer periods where required by financial regulations.

7. Data Security

We implement administrative, technical, and organisational measures designed to protect your information, including encrypted communication (HTTPS/TLS), access controls, authentication tokens, and monitoring for suspicious activity. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

8. International Transfers

Your information may be processed or stored in Kenya or in other countries where our service providers operate. Where data is transferred across borders, we take steps to ensure appropriate safeguards consistent with applicable data-protection laws.

9. Your Rights and Choices

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to legal retention requirements.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a relevant data-protection authority.

To exercise these rights, contact us at support@mymsomi.co.ke.

10. Children's Privacy

The App is intended for use by parents and guardians, not directly by children. Student profiles are managed under a parent account. We process student-related data only as necessary to deliver wallet and payment services authorised by the parent and participating institutions.

11. Third-Party Links and Services

The App may link to external websites or services. We are not responsible for the privacy practices of third parties. We encourage you to review their policies before providing personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the App, by email, or by updating the effective date above. Continued use of the App after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

Email: support@mymsomi.co.ke · Website: https://mymsomi.co.ke