Privacy Policy

CFAConnect is a location-based marketplace operating in your county, Kenya. It is a product of The Christ Followers Africa (CFA), in partnership with Shaynex Enterprise. Shaynex Enterprise is the collecting party for payments made on the platform.

For any privacy question, contact us through the Help Centre inside the app.

Account details you give us: your name, phone number, county and area, and the account type you choose (customer, service provider, business or rider).

Provider details: work categories, prices you set, qualifications or identity documents you upload for verification, and portfolio photos.

Listings: photos, descriptions, prices and locations of properties or items you advertise.

Activity: requests you post, jobs you accept, in-app messages, ratings and reviews.

Payments: M-Pesa transaction references, amounts, wallet balances and settlement records. We never see or store your M-Pesa PIN.

Location: your approximate area, used to match you with nearby workers, riders and jobs. Live trip location is used only while a trip is running.

Technical data: device and browser information needed to keep the service secure.

To create and run your account, match customers with providers, and show listings near you.

To process payments, hold funds until a job is confirmed, deduct the 4% commission and settle providers.

To send SMS notifications about bookings, payments, verification and safety alerts.

To review disputes, investigate fraud and keep the community safe.

To improve the service. We do not sell your personal information to anyone.

When you register you tick a box agreeing to this policy. We record the date and time of that consent and the policy version you agreed to.

We process your data to perform the service you asked for (bookings, orders, payments), to meet legal duties (financial records, tax) and, for safety and fraud checks, in our legitimate interest. You may withdraw consent at any time by deleting your account.

We show only what is needed, when it is needed. A provider sees your phone number only after you have agreed to their booking or price — not while a request is still open. Your exact location is shared only for an active job or trip.

Businesses (Food, Laundry, Gas) see the name, phone number and delivery address on orders placed with them, only to fulfil that order.

Payment and messaging partners: Safaricom (M-Pesa) and our SMS gateway, only to complete a transaction or send a message.

Authorities: only where the law requires it.

Access rules in our database make sure each person sees only their own records and the records of jobs they are part of. Identity documents are stored privately and opened only through short-lived links.

Payment credentials businesses connect (e.g. M-Pesa API keys for POS) are encrypted before storage. Passwords are never stored in readable form.

Only authorised CFAConnect staff can reach administrative tools, and their actions are logged.

If a personal-data breach occurs, we will notify the Office of the Data Protection Commissioner within 72 hours and inform affected users without delay, as the Act requires.

Ride PINs, trip sharing and the SOS button exist to keep you safe. When you send an SOS, your name, phone number and the time are sent immediately to CFAConnect administrators so they can respond.

Account and job information is kept while your account is open. Password reset codes expire within minutes. Live trip locations are used only during the trip.

Payment and settlement records are kept for as long as Kenyan financial and tax record-keeping rules require (generally seven years), even after an account is closed.

You may ask for your account to be deleted at any time from the Delete account page (/delete-account), the Help Centre, or by contacting CFAConnect support with the phone number on the account.

When an account is deleted we remove your profile, listings, messages and personal details. Payment records required by law are retained in anonymised form. Deletion frees your phone number for future registration.

Under the Kenya Data Protection Act, 2019 you have the right to be informed, to access your personal data, to object to processing, to correct false or misleading data, and to have data deleted.

You can edit most details yourself from your account page. For anything else, contact us through the Help Centre and we will respond within the time the law allows.

If you are unhappy with how we handle your data, you may complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).

CFAConnect is not intended for anyone under 18 years of age.

If this policy changes we will update this page and, where the change is significant, notify you in the app or by SMS.