Privacy Policy
Version draft-2026-10-01
Who we are
Rentor App Ltd is the data controller for Save, under Kenya's Data Protection Act, 2019. Registration with the Office of the Data Protection Commissioner: [REGISTRATION NUMBER].
What we collect and why
Your name, email and optional phone number to run your account; the savings records you enter; your group records; and, only if you choose to import one, the transactions in your M-Pesa statement to show you insights.
We never read your SMS and never ask for your M-Pesa PIN, card numbers or bank passwords.
Statements
Statement PDFs are deleted within 24 hours of being read. The password you type to open a statement is used once and never stored. Your transactions are visible only to you; a group sees only the single transaction that confirms your contribution.
Who processes your data
Vercel (hosting), Neon (database), Amazon Web Services (file storage), Resend (email), Anthropic (categorising merchant names and wording suggestions, with no personal details sent), Sentry (error reports), PostHog (anonymous usage, only with your consent) and Inngest (background jobs).
Data stored outside Kenya
At launch our providers store data outside Kenya. [SAFEGUARDS TO BE DESCRIBED AFTER LEGAL REVIEW.]
Your rights
You can see and change your choices in the Privacy centre, download your data, delete your imported statements, and close your account. Closed accounts are deleted within 30 days; group records you were part of are kept but shown as "Former member".
[RETENTION DETAILS, COMPLAINTS TO THE ODPC AND CONTACT DETAILS TO BE COMPLETED.]