Privacy notice

What we keep

• Account: your name, e-mail address, optional M-Pesa number, and a one-way hash of your password (we never see the password itself).
• Payments: the M-Pesa number that paid, the amount and the receipt number.
• Documents: files you upload are processed for your request and not kept, except that a paid-for document is held for 7 days so you can download it again, then deleted.
• Usage: the name and page count of documents lined on a pass, so the pass holder can see them.

Why

To provide the service, take payment, let you recover a download, and keep pass usage within its limits. We do not sell or share your information, other than with Safaricom to process M-Pesa payments.

Your rights

You can ask to see, correct or delete your information through the feedback page. [Steve: data controller details, ODPC registration number if applicable, retention periods for payment records.]