Privacy Policy
Effective date: 6 July 2026
Salio Smart Grow ("we", "us") is committed to handling personal data lawfully and transparently, in line with Kenya's Data Protection Act, 2019. This policy explains what we collect, why, and the rights you have. Contact for all privacy matters: info@saliokenya.com.
1. Information we collect
- Account information — business name, email address, phone number, password (stored only as a secure hash), and optional project details you add in Settings.
- Payment records you import — the content of M-Pesa confirmation messages, bank credit alerts, statement files and manual entries. These typically include payer names, phone numbers, amounts, dates and references.
- Subscription payments — when you pay for the Service via M-Pesa we record the amount, the paying phone number, and the M-Pesa receipt number.
- Technical data — a session cookie needed to keep you logged in, and standard server logs. We do not use advertising or tracking cookies.
2. How we use it
Only to provide the Service: matching payments to your customers, generating receipts and reports, operating your subscription, responding to support requests, and keeping the Service secure. We do not sell personal data, and we do not use your records for advertising.
3. Your customers' information
For the payment records a business imports, that business is the data controller and we act on its instructions. If you are a customer of one of our users and want a record corrected or removed, please contact that business directly; we support them in honouring such requests. Businesses using the Service confirm they have a lawful basis for keeping their payment records.
4. Sharing
We share data only with the service providers needed to run the Service — our hosting provider (servers may be located outside Kenya, protected by encryption in transit) and Safaricom's M-Pesa systems when you pay your subscription — and where the law or a valid legal process requires disclosure. Admin staff can access account data only to operate the Service, and a business's records are exported only to that business itself.
5. Security
Passwords are stored as one-way hashes, connections use HTTPS, each business's records are isolated to its own account, and payment callbacks are authenticated. No system is 100% secure, but we notify affected users and the Office of the Data Protection Commissioner of any breach as the law requires.
6. Retention
We keep your data while your account exists — including while a subscription has lapsed, so you can return without losing records. If you ask us to delete your account, we delete your data within 30 days, except minimal records we must keep by law (e.g. records of subscription payments for tax purposes).
7. Your rights
Under the Data Protection Act you may: access the personal data we hold about you; ask for corrections; ask for deletion; object to processing; and receive a copy of your data in a portable format (the in-app CSV/Excel/PDF exports, or on request). Write to info@saliokenya.com — we respond within 14 days. You may also complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).
8. Cookies
We set one strictly-necessary session cookie so you stay logged in. It contains no personal data and expires when your session ends. No third-party or advertising cookies are used.
9. Changes
If we change this policy materially we will announce it in the app or by email before the change takes effect. The effective date above always reflects the current version.
10. Contact
Salio Smart Grow — info@saliokenya.com · 0728 863 735 · Nairobi, Kenya.