Kwenda Privacy Policy

Privacy Policy

Last updated: 2026-01-03

1. Information We Collect

Account Information:

• First name and last name

• Email address

• User ID and authentication identifiers (Clerk ID)

• Account creation and login status

Authentication Data:

• Google account information (when you sign in with Google)

• One-time password (OTP) codes sent to your email for verification

• Authentication tokens stored securely on your device

Transaction and Booking Information:

• Phone number (required for mobile money payments)

• Event bookings and ticket purchases

• Payment method selection (Mpamba, Airtel Money)

• Transaction IDs and order details

• Ticket numbers and QR codes

• Event preferences and liked/favorited events

Usage Information:

• Events you view, browse, or interact with

• Services and event categories you access

• Device information and app usage patterns

Technical Information:

• IP address and network information

• Device type and operating system

• App version and crash reports

2. How We Use Your Information

Service Delivery:

• Create and manage your user account

• Authenticate your identity using Google Sign-In or email OTP

• Process event ticket bookings and purchases

• Generate and manage QR codes for your tickets

• Display your ticket history and manage bookings

• Provide access to general events and sports events

• Save your liked/favorited events

Payment Processing:

• Process payments through mobile money services (Mpamba, Airtel Money)

• Verify payment transactions

• Generate transaction records and receipts

• Handle payment-related communications

Communication:

• Send you booking confirmations and ticket information

• Provide customer support and respond to inquiries

• Send important service updates and notifications

• Inform you about events, promotions, and new features (with your consent)

Service Improvement:

• Analyze app usage to improve user experience

• Fix bugs and technical issues

• Develop new features and services

• Ensure app security and prevent fraud

3. Information Sharing and Disclosure

Service Providers:

• Payment processors (mobile money providers: Mpamba, Airtel Money) to process your transactions

• Authentication services (Google Sign-In, Clerk) for account management

• Cloud hosting and data storage providers to maintain our services

• Analytics services to understand app usage (in anonymized form)

Event Organizers:

• We may share your booking information (name, ticket details) with event organizers to facilitate event entry and management

• This sharing is limited to information necessary for the event you booked

Legal Requirements:

• When required by law, court order, or government regulation

• To respond to legal processes or requests from authorities

• To protect our rights, property, or safety, or that of our users

Business Transfers:

• In connection with a merger, acquisition, or sale of assets, your information may be transferred to the new entity

With Your Consent:

• We may share your information in other ways with your explicit consent

4. Data Storage and Security

Security Measures:

• We use industry-standard encryption for data transmission (HTTPS)

• Secure authentication methods (Google OAuth, OTP verification)

• API keys and sensitive credentials are stored securely using environment variables

• Regular security assessments and updates

• Access controls and authentication requirements for our systems

Limitations:

While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information.

5. Third-Party Services

Google Sign-In:

• When you sign in with Google, Google's privacy policy applies to the information Google collects

• We receive your email address and basic profile information from Google

• You can revoke access through your Google account settings

Mobile Money Providers:

• Payment processing through Mpamba and Airtel Money

• These providers handle payment data according to their own privacy policies

• We only receive payment confirmation and transaction status

Authentication Services:

• Clerk authentication service for user management

• OTP delivery services for email verification

We encourage you to review the privacy policies of these third-party services.

6. Your Rights and Choices

Access:

• Request access to the personal data we hold about you

• View your account information, booking history, and tickets through the app

Correction:

• Request correction of inaccurate or incomplete information

• Update your profile information through the app settings

Deletion:

• Request deletion of your account and associated data

• You can delete your account by contacting us or using the sign-out function

• Note: Some information may be retained for legal or business purposes

Data Portability:

• Request a copy of your data in a machine-readable format

Opt-Out:

• Unsubscribe from marketing communications

• Disable push notifications through device settings

Account Management:

• Sign out of your account at any time through the Profile section

• Clear locally stored data by uninstalling the app

To exercise these rights, contact us at support@kwenda.co

7. Children's Privacy

8. Data Retention

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or legitimate business purposes. Transaction records may be retained for accounting and legal compliance purposes.

9. International Data Transfers

10. Changes to This Privacy Policy

Your continued use of the app after such changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

11. Contact Us

We will respond to your inquiries within a reasonable timeframe and assist you with any privacy-related concerns.