Privacy Policy

1. Introduction

Nobuk is a payments categorization and reconciliation platform designed for communities, organizations, businesses, churches, welfare groups, estates, fundraising initiatives, events, and other collective financial activities.

2. Scope of This Policy

This Privacy Policy applies when you use:

• The Nobuk platform
• Nobuk Collect
• Nobuk Business
• Nobuk Reach
• Our websites, mobile applications, payment links, forms, APIs, integrations, WhatsApp services, SMS services, and any related products or services (collectively, the “Services”).

3. Information We Collect

We collect information in the following categories:

A. Personal Information You Provide

• Full name
• Phone number
• Email address
• Nationality or country
• Profile photos
• Organization or group details
• Job title or role
• Billing details
• Support communications

B. Financial & Transaction Information

We process the following to enable reconciliation and categorization:

• Payment references
• MPESA transaction notifications
• Bank transaction notifications
• Till or paybill confirmations
• Contribution records
• Collection amounts
• Event registration payments
• Donation information
• Ticketing payments
• Financial reconciliation metadata

C. Community & Group Information

• Group membership information
• Attendance data
• Participation records
• Contribution history
• Event registrations
• Challenge participation
• Survey or poll responses
• Community engagement activity

D. Device & Technical Information

• Device information
• Browser type
• IP address
• Operating system
• App version
• Usage logs
• Crash reports
• Analytics data

E. Communication Data

If you use WhatsApp, SMS, or email features, we may process:

• Phone numbers
• Message delivery status
• Notification preferences
• Message interaction metadata
• Customer support conversations and feedback

4. How We Use Your Information

We use your information for the following purposes:

• Provide and maintain our Services – payment reconciliation, financial categorization, statement generation, reporting, event registration, ticketing, automated receipts, group management, community engagement tools.
• Improve platform performance – analyze usage patterns to enhance user experience, security, develop new features, and optimize reporting and automation.
• Communicate with you – transaction confirmations, receipts, collection updates, system alerts, product announcements, customer support, and service-related notifications.
• Security and fraud prevention – detect suspicious activity, prevent fraud, secure accounts, monitor abuse, and protect platform integrity.
• Comply with legal obligations – Kenyan law, regulatory requirements, financial reporting, court orders, or lawful requests.

5. Legal Basis for Processing

We process personal information based on one or more of the following grounds:

• Your consent
• Performance of a contract with you
• Our legitimate business interests (e.g., improving services, preventing fraud)
• Compliance with legal obligations
• Security and fraud prevention requirements

6. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: Cloud hosting, analytics, messaging providers (WhatsApp, SMS), payment processors, infrastructure vendors — all contractually obligated to process data only on our behalf.
• Financial & Payment Partners: To process payments, reconcile collections, generate confirmations, and facilitate integrations.
• Organization Administrators: If you participate in a group, fundraiser, church, estate, or event using Nobuk, authorized administrators may access information related to your participation and payments.
• Legal Authorities: Where required by law, regulation, court order, or lawful government request.

7. Data Storage and Security

We implement reasonable administrative, technical, and organizational safeguards, including encrypted communications, secure cloud infrastructure, access controls, authentication systems, monitoring, logging, and backup systems. However, no system is 100% secure; we cannot guarantee absolute security.

8. Data Retention

We retain your information only as long as reasonably necessary to provide the Services, maintain records, comply with legal obligations, resolve disputes, and prevent fraud. Some transaction and reconciliation records may be retained for regulatory, audit, or reporting purposes even after account closure.

9. Your Privacy Rights

Depending on your jurisdiction (e.g., Kenya, EU, or other regions with similar laws), you may have the right to access, correct, delete, restrict or object to processing, withdraw consent, and request a portable copy of your data.

To exercise these rights, contact us at privacy@nobuk.africa. We will respond within the timeframes required by applicable law.

10. Cookies and Analytics

We may use cookies, analytics tools, session tracking, and performance monitoring technologies to improve functionality, security, and user experience. You can control cookies through your browser settings; disabling cookies may affect certain features.

11. Third-Party Services

Nobuk may integrate with or link to third-party platforms including MPESA, banks, WhatsApp, SMS providers, email providers, financial institutions, and payment gateways. These services are governed by their own privacy policies. We encourage you to review them.

12. Children’s Privacy

Our Services are not directed to individuals under 18 years of age without parental or guardian authorization. If we become aware that personal information from a minor has been collected improperly, we will take reasonable steps to delete it.

13. International Data Transfers

Your information may be processed or stored outside Kenya where our infrastructure providers or partners operate. When we transfer data internationally, we implement appropriate safeguards such as standard contractual clauses or equivalent measures.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The updated version will be posted on our website with a revised “Last Updated” date. Continued use of the Services after changes constitutes acceptance of the updated policy. For material changes, we may provide additional notice (e.g., email or in-app notification).

15. Contact Information

16. Non-Custodial Service Disclosure

Nobuk primarily operates as a non-custodial reconciliation and payments categorization platform. Unless expressly stated otherwise: funds are not held by Nobuk, payments are processed directly into designated accounts or financial channels, and Nobuk facilitates tracking, categorization, reporting, automation, and reconciliation of financial activity.

17. Community Transparency Features

Some Nobuk features are designed to improve transparency within communities and organizations. Depending on configuration selected by administrators, members of a group may be able to view contribution status, payment confirmations, reports, participation records, or public fundraising progress.