Privacy Policy

This policy explains what we do with your personal data. Optimum Prime Solutions Ltd is the data controller for Jamvi, and this policy is written to meet the Data Protection Act, 2019.

1. What we collect

When you sign in

You sign in with Google. From that we receive your email address, your name, and your Google profile photo. We never see or store your Google password.

What you give us

• a display name, if you set one different from your Google name;
• a profile photo, if you upload one;
• the financial records you enter — contributions, expenses, budgets, savings goals, contribution targets, and any description you write on them;
• the email addresses of people you invite to a group.

We do not collect bank details, M-Pesa PINs, card numbers, or national ID numbers. Jamvi never moves money, so it has no reason to hold anything that could move it.

What is created automatically

• a session record, so you stay signed in;
• the dates records were created and changed;
• server logs, which may include your IP address and the requests you made, kept for security and diagnosis.

2. Why we use it, and on what basis

• To provide the service — showing your records to you and to the group members you share them with. Basis: performance of our contract with you.
• To send necessary email — group invitations and the monthly digest. Basis: performance of our contract, and your consent for anything optional.
• To keep Jamvi secure and working — diagnosing faults, preventing abuse. Basis: our legitimate interest in a service that functions.
• To meet legal obligations where we have them.

We do not sell your personal data, and we do not use your financial records to advertise to you.

3. Who else processes it

We use a small number of providers to run Jamvi. They process data on our instructions only:

• Google — sign-in.
• Render — hosting and the database.
• Resend — sending invitation and digest emails.
• Cloudflare — domain name service and protection.
• An S3-compatible object storage provider — profile photos.

Other members of a group you join will see the records you share with them. That is the purpose of a shared workspace, and it is the main way your information reaches other people.

4. Where your data is stored

Jamvi runs in Frankfurt, Germany, so your data is stored and processed outside Kenya. Our other providers may also process data outside Kenya.

Those transfers are made on the basis of the appropriate safeguards in our providers' data processing agreements, as sections 48 and 49 of the Act permit.

5. How long we keep it

We keep your account information while your account is open. If you close it, we delete or anonymise your personal data within 90 days, except where we must keep something longer by law.

Because a group's ledger is a shared record, contributions and expenses recorded in a group do not disappear when you close your account — the remaining members keep their history. Where we can, we remove your name from it.

6. Your rights

Under the Data Protection Act you may ask us to:

• tell you what data we hold about you, and give you a copy;
• correct anything inaccurate;
• delete your data, where we are not required to keep it;
• stop or restrict a particular use;
• give you your data in a portable form.

Write to hello@jamvi.co.ke and we will respond within the statutory period.

7. Security

Connections to Jamvi are encrypted. Data is stored on managed infrastructure with access limited to those who need it to operate the service. Session cookies are restricted to Jamvi and are not readable by scripts in your browser.

No service can promise perfect security. If a breach affects your rights, we will notify you and the Office of the Data Protection Commissioner as the Act requires.

8. Cookies

Jamvi sets one essential cookie to keep you signed in. There are no advertising or third-party tracking cookies, which is why you are not asked to accept them.

9. Children

Jamvi is not intended for anyone under 18. If we learn that we hold a child's data without proper consent, we will delete it.

10. Changes

If we change this policy in a way that materially affects you, we will tell you by email or in the app before it takes effect.

11. Contact and complaints

For anything about your data, including any of the rights above, write to hello@jamvi.co.ke and it will reach the person responsible for data protection at Optimum Prime Solutions Ltd.

If you are not satisfied with our answer, you can complain to the Office of the Data Protection Commissioner in Kenya.