Last updated: June 2026

1. Who we are

iChama is a product of Bytecast Prime, a registered business in Kenya. We build digital tools for chama savings groups. You can reach us at info@ichama.africa.

2. What information we collect

We collect the following information when you use iChama:

• Account information — your name, email address, and phone number when you sign up
• Chama data — contributions, withdrawals, penalties, and meeting records you create
• Usage data — pages visited and actions taken within the app to help us improve iChama
• Device information — browser type and device type for technical support purposes

We do not collect payment card numbers, M-Pesa PINs, or any sensitive financial credentials.

3. How we use your information

• To operate your chama account and group features
• To send you notifications about contributions, withdrawals, and meetings
• To enforce your chama's rules automatically
• To calculate and display your accountability score
• To improve our platform based on how it is used
• To respond to support requests

4. How we share your information

We do not sell your personal data. We share your information only in the following limited cases:

• Within your chama — your name, accountability score, and contribution status are visible to other members of your chama group
• Service providers — we use Supabase for database hosting and Resend for email delivery. Both are bound by data protection agreements
• Legal requirements — if required by Kenyan law or court order

5. Data storage and security

Your data is stored on Supabase servers. All data is encrypted in transit using HTTPS. Access to your account is protected by passwords that we never store in plain text.

We apply row-level security on all database tables, meaning each user can only access data they are authorized to see.

6. Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your contribution history

To exercise any of these rights, contact us at the address below.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Chama financial records may be retained for up to 7 years for legal compliance purposes.

8. Cookies

iChama does not use advertising cookies. We use local storage in your browser only to keep you signed in and remember your theme preference. No tracking cookies are used.

9. Children

iChama is not intended for users under the age of 18. We do not knowingly collect data from minors.

10. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of iChama after changes means you accept the updated policy.