Last updated 2 October 2026
Privacy Policy
This policy explains what personal information Kash Lipa collects, why, and how we protect it, in line with the Personal Data Protection Act, 2022.
What we collect
- Account details: your name, email, phone number and business details.
- Verification (KYC): your NIDA number, date of birth, ID document photos, a selfie, and business registration documents if you provide them.
- Payments: customer phone numbers, amounts, references and the status of each payment and withdrawal.
- Technical data: IP addresses, device and browser details, and sign-in history, used to keep accounts secure.
Why we use it
- To open and run your account and process payments and withdrawals.
- To verify identity and prevent fraud, as payment regulations require.
- To send you service messages such as verification codes, receipts and security alerts.
- To meet legal duties, including record keeping and reporting to regulators when required.
Who we share it with
We share only what is needed with Selcom and the mobile money networks to complete payments, with SMS and email providers to deliver messages, and with authorities when the law requires it. We do not sell personal information.
How we protect it
NIDA numbers and payout account numbers are encrypted in our database. ID documents are stored outside the public website and can only be opened by authorised reviewers, and every access is logged. Connections to Kash Lipa are encrypted with HTTPS.
How long we keep it
We keep account, verification and transaction records for as long as the law requires after your account closes, then delete or anonymise them.
Your rights
You can ask to see, correct or delete your personal information, subject to legal record-keeping duties. Email support@kashlipa.com and we will reply within 30 days.