Overview
Mpesa Calculator ("we", "us", "our") is committed to protecting your privacy. This Privacy
Policy explains how we collect, use, share, and safeguard personal data when you use our
website, calculators, and related services. We operate under the Kenyan Data Protection Act
(DPA) and guidance from the Office of the Data Protection Commissioner (ODPC).
This Policy should be read together with our Terms of Service
and Cookie Policy. By using our services, you agree to
this Policy. If you disagree with any part, please discontinue use.
We do not sell personal data. We may display ads, but we do not use interest-based advertising
without consent, and we minimize data collected to what is necessary to operate calculators,
improve accuracy, and secure the service.
Data we collect
- Usage data: Pages visited, calculator selections, search queries, and
device/browser information (user agent, language, approximate location from IP for
security/analytics).
- Technical data: Log data (timestamps, referrer, response codes),
performance metrics, and crash/error reports.
- Contact data: If you reach out via our Contact page or email, we
collect your name, email, and message content.
- Consent data: Your cookie/consent choices and related preference
signals.
- Optional inputs: Amounts and service choices used in calculators (not
tied to an account; used to compute fees and improve accuracy).
We do not request national IDs, PINs, passwords, M-PESA credentials, or bank details. Do not
submit sensitive personal data unless strictly necessary for support, and if so, limit it to
what is required.
If you submit third-party information (for example, in a support message), you confirm you are
authorized to share it and have provided any necessary notices or consents.
How we use data
- Deliver and improve services: Operate calculators, ensure accuracy, and
enhance UX.
- Security and fraud prevention: Detect and prevent misuse, abuse, or
suspicious activity.
- Analytics and performance: Understand feature usage, optimize pages,
and fix errors.
- Support and communication: Respond to inquiries and provide updates
about service changes.
- Compliance: Meet legal obligations under the Kenyan DPA and other
applicable regulations.
We do not use your data for interest-based advertising without consent.
Where we use data to improve accuracy (for example, aggregated calculator inputs), we do so
without linking to identifiable individuals.
Legal bases (Kenyan DPA)
We rely on the following lawful bases under the Kenyan Data Protection Act:
- Consent: Where required for non-essential cookies/analytics or direct
responses when you contact us.
- Legitimate interests: To operate and secure our calculators, improve
performance, and prevent misuse, provided these interests are not overridden by your
rights.
- Legal obligation: To comply with applicable laws, law enforcement
requests, or ODPC directives.
Cookies & tracking
We use cookies and similar technologies for essential functions, preferences, security, and
analytics. Details are provided in our Cookie Policy,
including types, purposes, and how to manage them.
Non-essential cookies (for example, analytics) are only activated with your consent, where
required.
How we share data
- Service providers: Analytics (Google Analytics), hosting, and security
vendors who process data under instructions and appropriate safeguards.
- Legal and compliance: To comply with Kenyan law, ODPC directives, court
orders, or to protect our rights, users, or the public.
We do not sell personal data. We do not share data with advertisers for behavioral targeting.
Where we engage processors, we require confidentiality and data protection commitments
consistent with the Kenyan DPA.
International data transfers
Some providers (for example, Google Analytics) may process data outside Kenya. We seek to use
providers with appropriate safeguards and standard protections (for example, contractual
terms and security standards). By using our services, you acknowledge such transfers where
permitted by Kenyan law.
We monitor provider changes; if a material transfer risk arises, we will assess and, where
needed, adjust providers or controls.
Data retention
We retain personal data only as long as necessary for the purposes described (service
delivery, security, analytics, compliance) and then delete or de-identify it. Analytics
retention follows provider defaults. We periodically review retention to ensure
proportionality under the Kenyan DPA.
Support communications are retained for as long as needed to resolve the request and meet
legal or audit obligations, after which they are deleted or anonymized.
Your rights
If you are in Kenya, you have rights under the DPA, including:
- Access to personal data we hold about you.
- Correction of inaccurate or incomplete data.
- Objection to processing in certain cases (for example, analytics where consent applies).
- Withdrawal of consent where processing is based on consent (for example, non-essential
cookies).
- Deletion where applicable, subject to legal or legitimate requirements.
To exercise rights, contact us at mynetpaykenya@gmail.com or via our Contact page. We will respond in line with Kenyan legal
timelines. You may escalate unresolved concerns to the ODPC.
For verification, we may request limited additional information to confirm identity before
acting on a rights request.
Security
We use technical and organizational measures appropriate to the risk, including encryption in
transit, access controls, monitoring, and periodic reviews. No system is 100% secure; please
avoid sending sensitive data unless necessary.
We regularly review access privileges, apply patches to critical systems, and monitor for
abuse patterns to protect service integrity.
Children
Our services are not directed to children under 18. We do not knowingly collect personal data
from children. If you believe a child has provided data, contact us so we can delete it.
Parents or guardians who suspect a child's data was submitted should reach us via the Contact
page or email; we will act promptly to remove it.
Changes to this policy
We may update this Privacy Policy to reflect product changes, Kenyan legal requirements, ODPC
guidance, or provider changes. The "Last updated" date will change when updates are
published. Material updates may be highlighted on the site or via notices.
Where a change materially affects how we process personal data, we will provide a prominent
notice and, where required, seek renewed consent for non-essential processing.
Contact
For privacy questions or to exercise your rights, contact us at mynetpaykenya@gmail.com or through our
Contact page. If you are unsatisfied, you may escalate to
the Office of the Data Protection Commissioner (ODPC).