Privacy notice

Last updated: July 2026

Short version: every calculator — and the action plan — runs entirely in your browser and sends nothing anywhere. There is no account and nothing to sign in to, so there is nothing for us to hold. To move a plan to another phone you export a backup file and import it there; the file never leaves your hands.

This notice is written to the duty to notify in section 29of Kenya's Data Protection Act, 2019: what is collected, why, who else receives it, how it is protected, and what rights you have.

It is organised by where your data goes rather than by legal heading, because that is the question you actually have.

Who “we” is. Danico Ventures Ltd (company no. PVT-EYUM572, incorporated 10 March 2019, under the Companies Act, 2015) operates JiPange and Mwangaza Yield and is the data controller for the processing described here. Business address: JKIA Cargo Centre, Nairobi. Reach us at hello@jipangefinance.org.

1. What never leaves your device

This is almost everything. All calculators and the 5-question journey compute in your browser. No account is needed and nothing is transmitted.

Calculator inputs — salary, loan amounts, goal targets, expenses

Why: To compute the result you asked for
Where: Your device only. These are never sent anywhere.
How long: Until you clear the site's data, which you can do from this page

The 5-question journey answers, and goals you commit to

Why: So you can leave and come back without starting again
Where: Your device only, in browser localStorage
How long: Until you clear it

Your name, age, county, salary, dependants, and whether you are in a chama

Why: To tailor the plan and the numbers to you. Your name is only ever used to address you on your own screen.
Where: Your device only. There is no account and nowhere to send it.
How long: Until you clear the site's data, which you can do from this page

2. The action plan — now computed on your device

Earlier versions of this notice explained that requesting a plan sent your figures to our server and on to an AI provider outside Kenya. That is no longer how it works: since July 2026 the plan is generated on your device, by a deterministic engine. Section 25(c) of the Act asks that data be limited to what is necessary — and the necessary amount to transmit turned out to be none. The figures below are what the engine reads, and they go nowhere.

Age, county, gross and net monthly salary, savings capacity, number of dependants, whether you are in a chama

Why: To generate the three tailored recommendations you asked for.
Where: Nowhere. Since July 2026 the plan is computed on your device by a deterministic engine — no server, no AI provider, no cross-border transfer.
How long: The plan and its inputs stay in your browser's storage until you clear them.

3. What is stored if you choose to save a plan

Nothing. Until July 2026 there was an optional sign-in — an emailed link, then your name, age, county, salary and dependants held in a database outside Kenya. It was removed, and the table that described it is now empty rather than deleted, so a reader who remembers it is told what happened instead of finding a gap. Moving a plan between devices is now an exported backup file you carry yourself.

4. What we receive if you choose to contribute

The calculators and their documents are free, and nothing in JiPange asks you to pay. If you do choose to send something to the till on our support page, Safaricom includes some of your details in the confirmation and there is no way for us to decline them. Since March 2026 that is two of your names and a partially masked number rather than the full one.

Two of your names and a partially masked phone number, from the M-PESA confirmation

Why: Nothing. We do not need it and do not ask for it — Safaricom includes it in the payment confirmation and there is no way to decline it.
Where: It reaches our M-PESA statement and nowhere else. It is never matched to anything you did in the app, because the app sends us nothing to match it against.
How long: It stays in the M-PESA statement, which Safaricom keeps as the record of a payment. We do not copy it into any list of our own.

5. What the hosting collects regardless

Your IP address and browser user-agent, in server logs

Why: Serving the site, and detecting abuse — a normal function of any web host
Where: Netlify, our hosting provider, which serves from outside Kenya
How long: Netlify's log retention, typically around 30 days

6. Who else can receive your data

These are all of them. Each processes outside Kenya, which the Act treats as a transfer requiring appropriate safeguards — in each case, the provider's contractual data-processing terms.

Netlify — Hosts the site and runs the server functions. Outside Kenya.

We do not sell, rent or share your data with anyone else, and there are no advertising or tracking scripts on this site. Product links in the calculators are plain links carrying no identifier — no affiliate arrangement exists on any of them.

We link to our own WhatsApp channel, Pesa Smart KE, which we run jointly with Mwangaza Yield. Following it does not identify you to us: WhatsApp does not show channel admins who their followers are, so we never see your number and are never given a list. It is a broadcast — we post, you read — and it carries general money news only, never anything worked out from the figures you enter here, because those stay in your browser and never reach us. Once you open WhatsApp you are on their service, under their privacy policy, not ours.

7. Cookies

JiPange sets no cookies at all. It previously set one session cookie for signed-in users; sign-in was removed in July 2026 and that cookie went with it.

8. How it is protected

Everything is served over HTTPS. The AI endpoint accepts only a fixed, validated set of fields — anything else is rejected rather than forwarded — and it is rate limited. Data held on your device is protected by your browser's own site isolation. Where a provider holds data, it is held under that provider's security terms.

9. Your rights under the Act

Section 26 of the Data Protection Act, 2019 gives you these rights:

To be informed: To know what your data is being used for — which is what this page is for.
To access: To get a copy of the personal data held about you. For anything held on your device, you already have it; use the controls below to see and clear it.
To object: To object to processing of all or part of your data. In practice: do not request an AI plan, and do not sign in. Neither is required to use any calculator.
To correction: To have false or misleading data about you corrected.
To deletion: To have false or misleading data deleted. For a saved account, ask and we will delete it; for device data, clear it yourself at any time.

Most of these you can exercise yourself, immediately, without asking us — because most of the data is on your device and not ours:

Your data, your file

Everything JiPange knows lives on this device. Download it as a single file to keep or move to another device — nothing is ever uploaded.

10. Complaints

You may lodge a complaint with the ODPC if you believe your data rights have been infringed. The Office of the Data Protection Commissioner is the supervisory authority for data protection in Kenya. You do not need to come to us first, though we would rather you did — it is usually faster.

11. Children

JiPange is built for adults managing their own money, and the profile form does not accept an age under 18. We do not knowingly collect data from children. The Act requires a parent or guardian's consent for a child's data, and we would rather not be in a position to need it.

12. Changes

If the processing described here changes, this page changes with it and the date at the top moves. The disclosures are generated from a file in the codebase that is tested against the code itself, so a new field or a new recipient breaks the build before it can quietly go undisclosed.