Kapush HR Portal

Quick Navigation

1. Introduction 2. Data Collected 3. How We Use Data 4. Data Sharing 5. Security Measures 6. Data Retention 7. Your Rights 8. Cookies 9. Contact

1INTRODUCTION

KAPUSH Ltd ("KAPUSH", "we", "us", or "our") is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our earned wage access platform ("Service"). This policy complies with the Kenya Data Protection Act 2019 and applicable international data protection standards.

2INFORMATION WE COLLECT

2.1 Personal Identification Data

•Full legal name
•National ID number, passport number, or government-issued identification
•Email address and phone number (including M-Pesa registered number)
•Date of birth

2.2 Employment Information

•Employer name, job title, and department
•Monthly gross salary and employment start date
•Payroll deduction records

2.3 Financial Transaction Data

•Salary advance requests and M-Pesa transaction records
•Repayment history and outstanding balances
•Advance eligibility calculations

2.4 Technical and Usage Data

•IP address, device identifiers, and browser information
•Login timestamps, session duration, and pages viewed
•Geolocation data (with consent)

3HOW WE USE YOUR DATA

Service Delivery

• Processing salary advances
• Facilitating M-Pesa disbursements
• Managing payroll deductions

Security & Fraud Prevention

• Detecting fraudulent transactions
• Monitoring unusual activity
• Enforcing platform policies

Legal Compliance

• Meeting tax obligations
• Complying with labor laws
• Responding to legal requests

Service Improvement

• Analyzing usage patterns
• Conducting R&D
• Generating analytics

4DATA SHARING AND DISCLOSURE

We may share your data with:

•Employer Partners: For payroll processing and advance approvals
•Safaricom M-Pesa: For payment processing
•Financial Institutions: For settlement and reconciliation
•Service Providers: Under strict confidentiality agreements
•Legal Authorities: When required by law

5DATA SECURITY MEASURES

Encryption: AES-256 for data at rest, TLS 1.3 for data in transit
Access Controls: Role-based permissions, multi-factor authentication
Monitoring: 24/7 security monitoring, automated threat detection
Regular Audits: Quarterly security assessments and penetration testing

6DATA RETENTION

•Active Employees: Throughout employment relationship
•Former Employees: Seven (7) years after termination per tax requirements
•Transaction Records: Seven (7) years for audit purposes
•Analytics: Indefinitely in anonymized form

7YOUR RIGHTS (KENYA DATA PROTECTION ACT)

Right to Access

Request a copy of your personal data

Right to Rectification

Correct inaccurate information

Right to Erasure

Request deletion of your data

Right to Restrict Processing

Suspend data processing temporarily

Right to Data Portability

Transfer data to another provider

Right to Object

Object to certain processing activities

Right to Withdraw Consent

Revoke consent at any time

Right to Complain

Lodge complaint with ODPC

To exercise your rights: Email privacy@kapush.co.ke with subject line "Data Subject Rights Request"

8COOKIES AND TRACKING

We use the following types of cookies:

•Essential Cookies: Required for platform functionality
•Performance Cookies: Anonymous usage statistics
•Security Cookies: Fraud detection and prevention

9CONTACT INFORMATION

Data Protection Officer

Company: KAPUSH Ltd

Email: privacy@kapush.co.ke

Phone: +254 700 000 000

Address: Nairobi, Kenya

Regulatory Authority

Office: Data Protection Commissioner

Website: www.odpc.go.ke

Email: info@odpc.go.ke

Phone: +254 20 2635000

Last Updated: December 9, 2025 | Version 1.0

Privacy Policy

AES-256 Encryption

ODPC Compliant

Your Rights Protected