Privacy Policy

Last updated on Aug 5, 2025

1. Introduction

This Privacy Policy explains how Kaypee Group Limited (“we”, “us”, or “our”) collects, uses, discloses, and protects personal and institutional data through the Rejesho software-as-a-service (SaaS) platform, available at https://rejesho.com.

By using our platform, you consent to the data practices described in this policy.

2. Scope

This policy applies to:

  • All data collected through our SaaS platform, mobile interfaces, and APIs
  • All users, including admin and staff accounts under microfinance institutions
  • Visitors to our website https://rejesho.com

3. Types of Data Collected

We collect the following categories of data:

a) Institutional Data

  • Institution name, license number, address
  • Contact person and role
  • Regulatory identification details
  • Transaction and operational data

b) User Data

  • Names and email addresses of staff users
  • Phone numbers and login activity
  • Assigned roles, permissions, and access logs

c) Client Data (on behalf of MFIs)

As a processor, we collect and store:

  • Borrower profiles (name, gender, phone, ID number)
  • Loan records, payment history, arrears, balances
  • Repayment schedules and digital receipts

Rejesho only processes this data on behalf of the MFI. The institution is the data controller for its clients.

d) Technical Data

  • IP addresses, browser types, device identifiers
  • Session logs, login attempts, usage analytics

4. Legal Basis for Processing

We process data under the following lawful bases:

  • Contractual necessity: To provide the subscribed SaaS services
  • Legitimate interest: To improve platform reliability, security, and performance
  • Legal obligation: To comply with applicable Tanzanian financial or data regulations
  • Consent: Where applicable (e.g., newsletter signup or optional features)

5. How We Use Your Data

We use collected data to:

  • Set up and manage your institution’s Rejesho account
  • Deliver core features like loan tracking and reporting
  • Provide technical support and training
  • Monitor system performance and prevent misuse
  • Comply with Tanzanian legal, financial, or regulatory obligations

We do not sell, rent, or trade your data to any third parties.

6. Third-Party Processors

We may share data with trusted third-party service providers who help us operate the platform, including:

  • Cloud hosting providers (e.g., AWS or regional alternatives)
  • Payment gateway providers (e.g., Flutterwave)
  • Email and SMS notification services (e.g., Africa’s Talking)

All such parties are bound by strict data protection obligations and are prohibited from using your data for any other purpose.

7. Data Security

We implement industry-standard technical and organizational measures, including:

  • SSL encryption
  • Role-based access controls
  • Activity logging
  • Regular backups
  • Firewall and malware protection

Access to client or institutional data is strictly limited to authorized personnel.

8. Data Retention

  • Institution data is retained as long as the account is active and up to 12 months after termination, unless required longer by regulation.
  • Client data is retained under your institution’s control. Upon termination or written request, we can export or permanently delete such data.
  • Technical logs are retained for up to 90 days for security auditing.

9. Data Subject Rights

Under Tanzanian data protection laws, your institution and its users may have the right to:

  • Access, correct, or update personal data
  • Request deletion of personal data (subject to legal obligations)
  • Object to processing under specific circumstances
  • Request data portability

To exercise these rights, email founder@kaypeetech.com. We may require identity verification.

10. International Data Transfers

Your data is primarily stored and processed in Tanzania. If any data is processed outside Tanzania (e.g., cloud hosting in a regional or global zone), such transfers will comply with Tanzanian data protection guidelines and secure transfer protocols.

11. Cookies & Tracking

Rejesho uses cookies for:

  • User session management
  • Analytics and performance tracking
  • Security and login protection

You can manage cookie preferences in your browser settings.

12. Changes to This Privacy Policy

We may update this policy to reflect changes in legal or operational requirements. All changes will be posted on this page with the updated “Effective Date.” Continued use of the platform indicates your acceptance of the updated policy.

13. Contact

For any inquiries, access requests, or concerns regarding this Privacy Policy:

Kaypee Group Limited
Plot No. 320, Sinza A, Dar es Salaam, Tanzania
📧 founder@kaypeetech.com
🌐 https://rejesho.com