Privacy Policy

Last updated: October 2026 Applies to all HandshakeAI users in Kenya

1. What we collect

We collect only what the platform needs to run: your name and email when you register; your Kenyan mobile number when you set up M-Pesa payouts (workers) or business contact details (clients); the content you submit for tasks; and technical logs needed for security and fraud prevention. We do not ask for identity documents or sensitive personal information such as ID numbers, PINs or passwords beyond your login credentials.

2. How we use it

Your data is used to operate your account, match you with tasks, process rewards and withdrawals, prevent fraud and duplicate accounts, provide support, and meet legal obligations. Your phone number is masked whenever it is displayed to others (for example in withdrawal records).

3. Who can see your data

Task submissions are visible to the Business Client who posted the task and to authorised administrators. Your profile, wallet and private records are visible only to you and to staff performing platform duties. Financial records are stored in an append-only ledger that users cannot edit.

4. Payments

Withdrawal phone numbers are used solely to send your payouts and are never used for marketing. Payment provider details (such as M-Pesa transaction references) are stored securely and are not exposed in the app to anyone other than you and authorised staff.

5. Data retention and deletion

You can request account deletion through support. We delete or anonymise your personal data within 90 days of the request, except for financial ledger entries and records we must keep under Kenyan law for tax and anti-fraud purposes, which are retained in a form that no longer identifies you publicly.

6. Your rights

You may access, correct, or request deletion of your personal data, object to processing, and lodge a complaint with the Office of the Data Protection Commissioner (Kenya). To exercise any right, contact support.

7. Cookies and security

We use only the cookies and local storage needed to keep you signed in and secure — no advertising trackers. Data is transmitted over encrypted connections, and access to personal data by staff is logged and audited.

8. Changes

We will announce material changes to this policy in-app before they take effect, and update the date at the top of this page.