CheckRada is operated by Mavlon Enterprises Limited, registered in Kenya. We are committed to protecting the personal data of our users in accordance with the Kenya Data Protection Act 2019 and the Data Protection (General) Regulations 2021.
This Privacy Policy explains what data we collect, how we use it, and your rights as a data subject under Kenyan law.
| Category | What We Collect |
|---|---|
| Account data | Mobile phone number, full name, date of account creation, referral source |
| Transaction data | Deposit amounts, withdrawal amounts, forecasting activity, wallet balance history, payout records |
| Device data | Browser type, device type, IP address, operating system |
| Usage data | Pages visited, forecasts viewed, time on Platform, search queries within the Platform |
| Communications | SMS messages sent to your number, support interactions, dispute records |
We do not collect email addresses, national ID numbers, or financial account details other than your M-Pesa registered phone number.
We use your data to: operate your account and process M-Pesa transactions; send OTP verification codes and account notifications via SMS; resolve markets and calculate payouts accurately; detect fraud, abuse and prohibited conduct; generate anonymised aggregate sentiment data for the National Sentiment Index; improve Platform performance and user experience; and comply with legal obligations under Kenyan law including anti-money laundering requirements.
We do not sell your personal data. We share personal data only with the following parties and only as necessary:
Safaricom (M-Pesa) — for payment processing of deposits and withdrawals to your registered phone number.
Africa's Talking — for SMS OTP delivery and account notifications.
Regulatory authorities — if required by Kenyan law, court order, or lawful request from a competent authority.
Account data is retained for as long as your account is active and for 7 years thereafter as required by Kenyan financial regulations including the Proceeds of Crime and Anti-Money Laundering Act.
You may request deletion of your account at any time by contacting us at privacy@checkrada.co.ke. Account deletion is subject to the above retention obligations — transaction records required by law will be retained for the statutory period even after account closure.
For dormant accounts, data is retained in accordance with the Unclaimed Financial Assets Act 2011 and CheckRada's Dormant Accounts policy (see Terms and Conditions Section 14).
Under the Kenya Data Protection Act 2019 you have the following rights as a data subject:
Right of access — you may request a copy of the personal data we hold about you.
Right to rectification — you may request correction of inaccurate personal data.
Right to erasure — you may request deletion of your personal data, subject to legal retention obligations.
Right to object — you may object to processing of your data for marketing purposes at any time.
Right to data portability — you may request your forecast history and account data in a portable format.
To exercise any of these rights contact us at privacy@checkrada.co.ke. We will respond within 21 days as required by the Act.
We use industry-standard security measures to protect your personal data including: encrypted data transmission (HTTPS/TLS) for all Platform communications; OTP-based authentication with no passwords stored in our systems; access controls and role-based permissions on all user data systems; and regular security reviews of our infrastructure.
While we take all reasonable steps to protect your data, no system is entirely secure. You are responsible for keeping your registered phone number secure and reporting any suspected unauthorised account access to us immediately.
CheckRada uses the following tracking technologies on the Platform:
Essential cookies — required for the Platform to function. These cannot be disabled.
Google Analytics (GA4) — we use Google Analytics to understand how users navigate the Platform including pages visited, time spent and actions taken. This data is anonymised and aggregated. No personally identifiable information is sent to Google.
By using CheckRada you consent to the use of these analytics tools as described above.
We will notify you of material changes to this Privacy Policy via SMS to your registered phone number at least 7 days before the changes take effect. The updated Policy will be posted on the Platform with a new effective date. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.