Legal
This explains what we collect, why we keep it, who can see it, and how you get it out or have it deleted. Short version: it is your group’s information, we look after it, and we never sell it.
Last updated 12 May 2026 · WemaHub Limited, Nairobi · Data controller contact: hi@wemahub.com
Never sold
Your member list and phone numbers are not sold or shared with advertisers or lenders.
Encrypted and backed up
Records are encrypted in transit and at rest, with daily backups in more than one place.
Yours to take
Export everything as Excel, CSV or PDF at any time, and ask us to delete it afterwards.
Section 1
We only collect what a welfare group needs to run its contributions.
Member details your officials enter: name, phone number, email, membership number, category, next of kin and their phone.
Contribution records: cases, amounts due, amounts paid, M-Pesa reference numbers, dates and receipts.
Group records: cases, beneficiaries, payouts, projects, announcements and the audit log of actions taken.
Sign-in information: your password held in scrambled form, and verification codes sent to officials.
Basic technical information: device type, browser and the time of sign-in, kept for security.
Section 2
To run the service you asked for: keeping the register, sending contribution requests, recording payments, producing statements and sending payouts.
To keep your group safe: spotting unusual sign-ins, keeping an audit trail so officials can be held to account, and preventing fraud.
To support you: when you call or email, we look at your records only as far as needed to solve the problem.
To meet the law: some financial records must be kept for a period set by Kenyan law.
Section 3
We do not sell your information. We do not rent it. We do not pass member phone numbers to lenders, advertisers, political campaigns or data brokers. We do not use your group's records to train products for other people.
We do not read your group's books out of curiosity. Staff access is limited, logged, and only used to fix a problem you have reported or to meet a legal order.
Section 5
Members see their own statement and the shared information about a case, such as the beneficiary and the total collected.
Officials see the full register and all case records, because they are accountable for the group's money. Every action they take is written to the audit log with their name and the time.
Section 6
Information is encrypted while it travels and while it is stored. Access to our systems needs two-factor sign-in, and administrator actions are logged.
We take backups every day, in more than one location, so a failure or a lost device does not lose your group's history.
If a breach ever happens that puts your information at risk, we will tell the affected groups and the Data Protection Commissioner without undue delay, and explain plainly what happened and what to do.
Section 7
We keep your group's records while your group uses WemaHub. When a group closes, we delete member details within 90 days, apart from financial records we are required by law to retain, which are kept in restricted storage until that period ends.
Section 8
Under the Data Protection Act, 2019, you can:
Ask what information we hold about you and get a copy.
Correct anything that is wrong — usually your official can do this immediately.
Ask us to delete your information where we are not required to keep it.
Object to a use you are not comfortable with, and withdraw consent for messages.
Take your records with you as Excel, CSV or PDF.
Section 9
We send messages about your own group: contribution requests, reminders, receipts, announcements from your officials, and security alerts. These are part of the service.
Marketing messages from WemaHub are separate, and you can stop them at any time by replying STOP or telling us at hi@wemahub.com.
Section 10
WemaHub accounts are for adults. A child can appear in records as a beneficiary or next of kin, and we treat that information with extra care and keep it to the minimum needed.
Section 11
If we change how we use information in a way that matters to you, we will tell your officials by email and in the app before the change takes effect.
If you think we have mishandled your information, write to hi@wemahub.com or call 0748 637 080. You also have the right to complain to the Office of the Data Protection Commissioner in Kenya.
