Your data, plainly.
What Sharet Africa collects, why, who sees it, how long we keep it, and how to ask us to change or delete it.
We collect what we need to run your account and stop fraud. We never sell it. Website use is anonymous, with no cookies. You can ask to see, correct or delete your data.
Who we are
Sharet Africa ("Sharet", "we") runs sharet.africa and the Sharet dashboard from Nairobi, Kenya. We are the data controller for the personal data described here. Contact us about privacy at hello@sharet.africa.
What we collect
- Account details: your name, email, M-Pesa number and password (stored only as a one-way hash).
- Verification details, when you choose bank-grade verification: ID type and number, date of birth, KRA PIN, address, occupation, income band, source of funds, next of kin, photos of your ID, three selfies and your signature. These are encrypted, kept on private storage, and seen only by our compliance team.
- Sign-up and verification records: when you create an account or send verification details, we record the IP address, approximate country, browser and device description, browser languages, the page used and the time. We use these to prevent fraud and identity theft and to meet our anti-money-laundering duties. They are encrypted with your verification details and seen only by our compliance team. (This is separate from website use below, which stays anonymous.)
- Business details, if you register a business: its registration, tax and contact details, its directors and owners, and its settlement account.
- Messages you send through our forms, and our replies.
- Payments you make or receive through your Sharet wallet.
- Website use: which pages are viewed, how far down people scroll and where they click. We do this without cookies, without storing IP addresses and without third-party trackers; the anonymous visitor code changes every day. If your browser sends "Do Not Track" or "Global Privacy Control", we record nothing.
Why we use it
- To open and run your account and move money you ask us to move.
- To verify who you are and prevent fraud and money laundering, as the law requires of payment providers.
- To answer you, and to send account emails (sign-up, invitations, receipts). We do not send marketing without your consent.
- To understand which pages help people and improve the site.
Who we share it with
Only who we must, to do what you ask: the mobile money and banking partners that carry a payment (for example Safaricom M-Pesa), our hosting and email providers acting on our instructions, and regulators or law enforcement when the law requires it. We do not sell personal data.
How long we keep it
Account and verification records are kept while your account is open and afterwards for as long as financial and anti-money-laundering law requires. Website analytics are anonymous. Messages are kept while they are useful to answer you.
Your rights
Under the Kenya Data Protection Act, 2019 you can ask to see the data we hold about you, correct it, object to some uses, ask us to delete it where the law allows, and complain to the Office of the Data Protection Commissioner. Write to hello@sharet.africa; we answer within the time the law sets.
Keeping it safe
Connections are encrypted (HTTPS). Passwords are hashed, API keys are stored only as fingerprints, and verification details, documents and provider credentials are encrypted at rest. Access inside Sharet is limited by role.
Changes
When this notice changes we update the date at the top, and tell account holders by email about any change that matters to them.
Payments for Kenya and East Africa. Nairobi.
Sharet Africa Ltd is not a bank. Payment services are provided with Cashia (Kashia Services Limited), licensed by the Central Bank of Kenya as a payment service provider. Check on CBK's licensed directory
Customer money is held in a separate trust account. Fees, rates and limits are shown in the app before you confirm.