Privacy Policy

Last updated: 2 July 2026

1. Who we are

eChama is operated by Jospam Consulting Limited, a company registered in Kenya (Registration No. PVT-XXXXXXX). Our platform is available at echama.org and helps chama groups manage contributions, loans, meetings, and trade escrow.

Contact: [email protected]

2. Data we collect

  • Account information: full name, email address, phone number, national ID number (for KYC).
  • Financial data: contribution history, loan records, M-Pesa transaction references.
  • Usage data: pages visited, device type, IP address, browser type.
  • Communications: WhatsApp messages and OTPs sent via our platform for verification and notifications.

3. How we use your data

  • Authenticating your account and verifying your identity.
  • Processing contributions, loans, and escrow transactions.
  • Sending you notifications (contribution reminders, meeting alerts, payment confirmations) via WhatsApp and email.
  • Generating reports for your chama group administrators.
  • Complying with Kenyan financial regulations.

4. Data sharing

We do not sell your personal data. We share data only with:

  • Supabase — cloud database and authentication provider.
  • Safaricom / M-Pesa — to process mobile money transactions.
  • Meta (WhatsApp Cloud API) — to deliver notifications and OTPs.
  • Google — for calendar events, email delivery, and AI features.
  • Your chama group administrators, who can see member contribution and loan records for their group only.

5. Data retention

We retain your data for as long as your account is active. Financial records are retained for 7 years as required by Kenyan law. You may request deletion of non-financial data at any time.

6. Your rights

You have the right to access, correct, or delete your personal data. To exercise these rights, email [email protected].

7. Data deletion

To request deletion of your eChama account and associated personal data:

  1. Email [email protected] with the subject line "Account Deletion Request".
  2. Include your registered email address or phone number.
  3. We will process your request within 14 days and confirm by email.

Note: financial transaction records may be retained for 7 years as required by Kenyan law even after account deletion.

8. Cookies

We use essential cookies only — for authentication sessions. We do not use advertising or tracking cookies.

9. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice.

10. Contact

Questions about this policy? Contact us at [email protected] or write to Jospam Consulting Limited, Nairobi, Kenya.