Privacy Policy

Effective September 2026.

ChamaPoint is a record-keeping platform for chamas, welfare groups, and investment clubs. This page explains what we collect through the ChamaPoint mobile app, USSD service, and web portal, why we collect it, and what control you have over it.

Information we collect

When you or your chama's admin creates your account, we collect:

• Identity information: first and last name, phone number, and (optionally) email address.
• Account credentials: your password, stored as a one-way cryptographic hash. We cannot see or recover your actual password.
• Financial records: contributions, loan balances, credit score, loan limit, and account balance within your chama, entered by you, your treasurer, or your chama's admin.
• Verification documents, if your chama requires KYC: an identification document, financial statement, and profile picture.
• Location details your chama's admin records for you (city, town, landmark). This is entered manually and is never GPS-tracked.

We do not collect your device's precise location, contacts, or browsing history, and the app does not request those permissions.

How we use it

• To operate your chama's records: contributions, loans, member status, and statements.
• To authenticate you and keep your account secure.
• To send you SMS or email messages you've requested or that relate to your account: password reset codes, verification codes, activation notices, and dividend or statement notifications.

We do not sell your data, and we do not use it for advertising.

Who we share it with

Your chama's own admins and authorized staff (such as the treasurer, secretary, or chair, depending on the roles your chama has granted) can see the records your chama's settings allow for their role. Outside of your chama, we share data only with the service providers that make the platform work:

• SMS gateway providers (your chama's chosen provider, or ChamaPoint's own by default), to deliver verification codes and notifications to your phone.
• Cloud document storage, for KYC documents and profile pictures that you or your chama's admin upload.
• Payment processors (such as M-Pesa), where your chama has enabled mobile money contributions or dividend payments.

Each chama's data is isolated from every other chama on the platform. No chama can see another chama's members or records.

Data retention and account deletion

You can request deletion of your account at any time from the app (Account → Delete My Account) or by contacting info@briliotechnologies.com from your registered phone number or email if you can't access the app. Step-by-step instructions are on our Delete Your Account page.

Deleting your account disables your login immediately and removes your personal details from our systems: your name, phone number, email, ID number, photo, uploaded documents, and next-of-kin details. Your chama's financial ledger entries (contributions, loan history) are not deleted, because they belong to your chama's own financial records, and removing them would corrupt your chama's group-level totals and audit trail for every other member. Those entries remain, associated with a deactivated, anonymized account rather than your name.

Security

Passwords are never stored in plain text. On mobile, your session tokens are stored using your device's built-in secure storage (iOS Keychain / Android Keystore), not general-purpose app storage. Each chama's data is kept in a separate, isolated database schema.

Children's privacy

ChamaPoint is intended for adults managing group savings and lending. It is not directed at, and we do not knowingly collect information from, children under 18.

Changes to this policy

If we make material changes to this policy, we'll update the effective date above and, where required, notify chama admins.

Contact us

Questions about this policy or your data: info@briliotechnologies.com.