Privacy policy

Last updated 6 November 2026

This policy explains what Kesh Labs Ltd ("Kesh", "we", "our" or "us") collects when you use the Kesh app and kesh.ke, why we collect it, and who we share it with. Kesh is a payments app for people in Kenya.

Your data is not our business. We do not sell it, rent it or trade it, and we never share it with advertisers or data brokers. We use it to run Kesh, as this policy sets out, and for nothing else.

By using Kesh, you agree to this policy and our Terms of service. If you do not agree, please do not use Kesh.

1. Information we collect

a. Your account

your phone number, keshtag and display name
your full name, and your email address and gender if you add them
your sign-in details
a profile photo, if you add one

Other Kesh users can see your keshtag, display name and profile photo.

b. Identity verification

To verify your identity, as Kenyan law requires, we ask for your ID details, your date of birth and your full name. We may also ask for a live selfie or a photo of your ID.

c. Money and payments

Your wallet address, balances and transactions, and the M-Pesa numbers and bank accounts you add.

d. Contacts, if you turn on contact sync

The phone numbers and names in your contacts, to show you which of them use Kesh. If you turn sync off, we delete them.

e. Your phone and how you use the app

Details about your phone, such as its model and operating system, how you use the app, and crash reports when something goes wrong.

f. Camera and SMS

We use the camera to scan QR codes, to take a profile photo and to verify your identity. On Android, the app reads the sign-in code from the SMS we send you, and nothing else.

2. How we use your information

to create your account and keep it secure
to send, receive and cash out money
to verify your identity and meet Kenya's anti-money-laundering rules
to spot and stop fraud
to send you receipts, alerts and updates
to fix problems and improve the app
to comply with Kenyan law

We share your information only with:

companies that help us run Kesh, such as identity verification, messaging, hosting and analytics providers, and the payment networks and banks that move your money. Each gets only what it needs to do its job
the Central Bank of Kenya, the Office of the Data Protection Commissioner (ODPC) and other authorities, when the law requires it
other Kesh users: people who have your number in their contacts can see that you use Kesh, and people you pay or request money from see your keshtag and display name

Your data is not our business. We never sell it.

4. Your rights under Kenyan law

As a data subject under the Kenya Data Protection Act 2019, you have the right to:

access and receive a copy of your personal data
correct inaccurate or outdated information
object to processing under certain conditions
request erasure of your data ("right to be forgotten")
lodge a complaint with the ODPC

You can change your details and turn off contact sync in the app. For anything else, email support@kesh.ke or use this form. We keep what the law requires us to keep, such as transaction records.

5. Data storage and security

data travels encrypted between your phone and our servers
your wallet key is created on your phone and kept in its secure storage, with encrypted copies so you can recover your wallet
fingerprint and face checks happen on your phone
your data is stored in cloud infrastructure located within or outside Kenya, in compliance with applicable data transfer laws

6. Data retention

We keep your information only as long as we need it to provide Kesh, meet legal and regulatory obligations, and resolve disputes. We keep transaction records for 7 years, as Kenyan financial regulations require.

7. Children's privacy

Kesh is not intended for children under the age of 18. We do not knowingly collect personal data from minors.

8. Updates to this policy

We may update this policy from time to time. We will notify you of material changes in the app or by email.

9. Contact us

If you have questions or concerns about this policy, contact our Data Protection Officer:

Email: vlad@kesh.ke Phone: +254 796 980788 Registered office: Jahazi Building, James Gichuru Road, Nairobi, Kenya