1. Who we are
Lipasafe ("Lipasafe", "we", "us") is an escrow payment platform operated by Holda Fintech Technologies Limited, a company registered in Kenya. This Privacy Policy explains what personal data we collect when you use the Lipasafe mobile application and related services (the "Services"), why we collect it, and how we protect it.
By using the Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.
2. Information we collect
2.1 Information you give us
- Account details — your full name, phone number, email address, and password.
- Identity documents — national ID, passport, or other documents provided for Know Your Customer (KYC) verification, and your photo where required.
- Transaction details — transaction amounts, counterparty information, order descriptions, delivery details, and dispute communications.
- Support communications — messages you send to our support and dispute resolution teams.
2.2 Information collected automatically
- Device & log data — device model, operating system, app version, IP address, and crash reports.
- Usage data — features you use, screens you visit, and actions you take in the app.
- SMS processing (with permission) — where you grant permission, the app may read M-Pesa transaction confirmation SMS to reconcile your payments automatically. We only process SMS content needed for this purpose.
3. How we use your information
- To create and manage your account and verify your identity.
- To process escrow transactions, payments, and payouts.
- To detect, prevent, and investigate fraud, money laundering, and other unlawful activity.
- To provide customer support and resolve disputes between buyers and sellers.
- To send transaction notifications, security alerts, and service updates.
- To improve, maintain, and secure the Services.
- To comply with legal and regulatory obligations under Kenyan law.
4. Payments & financial data
Lipasafe processes payments through M-Pesa and regulated payment partners. When you make or receive a payment:
- Payment instructions are transmitted securely to the relevant payment provider.
- We record transaction references, amounts, and statuses to maintain your transaction history and receipts.
- Funds in escrow are held separately from operating funds and are only released according to the escrow terms agreed by the parties.
- We never store your M-Pesa PIN, and we will never ask you for it.
5. KYC & identity verification
To keep the platform safe and comply with anti-money-laundering (AML) and counter-terrorism financing (CTF) regulations in Kenya, every user must complete identity verification before transacting. Your verification documents are:
- Used solely for identity verification and regulatory compliance.
- Stored securely with restricted access.
- Shared only with licensed verification providers or authorities where legally required.
6. How we share information
We share personal information only in these limited circumstances:
- With counterparties — limited details (such as your name and phone number) are shared with the buyer or seller in a transaction, and vice versa, so the deal can be completed.
- With service providers — cloud hosting, SMS delivery, payment processing, and identity verification partners who process data on our behalf under strict confidentiality.
- With regulators & authorities — where required by law, court order, or a competent Kenyan authority.
- In business transfers — if Holda Fintech Technologies Limited is involved in a merger or acquisition, data may be transferred subject to this policy.
7. Data security
We protect your data using industry-standard measures, including:
- Encryption of data in transit (TLS) and at rest.
- Strict internal access controls on a need-to-know basis.
- Regular security reviews and monitoring for suspicious activity.
- Segregation of escrow funds from company operating accounts.
No system is 100% secure, but we work continuously to protect your information and will notify you and the relevant authority of any qualifying data breach as required by law.
8. Data retention
We keep your personal data only for as long as necessary for the purposes described in this policy, including for legal, regulatory, accounting, and dispute-resolution requirements. Transaction records are retained for the period required by Kenyan financial regulations. When data is no longer needed, it is securely deleted or anonymized.
9. Your rights
Under the Kenya Data Protection Act, 2019, you have the right to:
- Be informed of how your data is used (this policy).
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data, subject to legal retention obligations.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent (such as SMS permissions).
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.
To exercise any of these rights, contact us using the details in Section 13.
10. Cookies & tracking
This website uses minimal cookies and similar technologies required for core functionality (such as remembering your preferences). The Lipasafe mobile app does not use advertising trackers.
11. Children's privacy
The Services are intended for users aged 18 and above. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and, for material changes, notify you through the app or by SMS/email. Continued use of the Services after an update means you accept the revised policy.
13. Contact us
For privacy questions, requests, or complaints, reach us:
- Data Protection / Privacy enquiries: privacy@lipasafe.co.ke
- General support: support@lipasafe.co.ke
- Company: Holda Fintech Technologies Limited, Kenya