Legal
Privacy Policy
Last updated: June 2026
Introduction
Saaph Commerce Limited ("Saaph", "we", "our") is a company registered in Kenya. We operate the website saaph.co.ke and the Saaph mobile application (collectively, the "Platform"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Platform. By using Saaph, you agree to the practices described in this policy.
What We Collect
We collect the following categories of personal information: • Account information: your name, email address, and phone number provided at registration. • Profile content: profile photo and any bio or description you add to your account. • Journey and community content: posts, photos, videos, captions, product tags, and progress updates you publish on the Platform. • Product interaction data: items you view, save, add to cart, or purchase. • Order history: records of purchases including product names, quantities, prices, and delivery details. • Payment reference numbers: M-Pesa transaction references used to confirm payment. We do not store card numbers, PINs, or any sensitive payment credentials — payments are processed via M-Pesa (Safaricom's Daraja API). • Device and usage data: IP address, browser type, device identifiers, and usage patterns collected automatically to maintain and improve the Platform.
How We Use It
We use the information we collect for the following purposes: • Account management: to create and maintain your account and authenticate you when you sign in. • Order processing: to fulfil purchases, confirm payments, arrange delivery, and send order updates. • Platform features: to power journeys, community posts, the discovery feed, product recommendations, and the diagnostic quiz. • Creator attribution: to track which journeys influenced purchases and calculate creator reward points. • Customer support: to respond to enquiries, resolve disputes, and handle sourcing requests. • Platform improvement: to understand how the Platform is used and make it better. • Legal compliance: to meet obligations under Kenyan law.
Data Sharing
We do not sell your personal data to any third party, ever. We share data only with the following service providers who help us operate the Platform: • Supabase — our database provider. Your account, order, and journey data is stored on Supabase infrastructure. • Cloudinary — our media storage provider. Photos and videos you upload are stored and served via Cloudinary. • Safaricom Daraja API (M-Pesa) — our payment processing provider. When you make a purchase, your phone number and payment amount are sent to M-Pesa to process the transaction, and we receive a transaction confirmation and reference number in return. • Vercel — our web hosting provider. The saaph.co.ke website is served via Vercel infrastructure. All service providers are contractually bound to protect your data and use it only to provide their services to us. We may disclose your information if required to do so by Kenyan law or a valid court order.
Your Rights
You have the following rights regarding your personal data: • Access: you may request a copy of the personal data we hold about you. • Correction: you may update or correct your account information at any time through the app or by contacting us. • Deletion: you may request that we delete your account and all associated personal data. We will process deletion requests within 30 days. To exercise any of these rights, contact us at hello@saaph.co.ke.
Delete Your Account & Data
To request deletion of your Saaph account and associated data, email hello@saaph.co.ke with the subject line "Delete My Account" from the email address associated with your account. What gets deleted: your profile information (name, email, phone, photos), posts and journey content, and order history. What we retain: transaction records required for tax and legal compliance under Kenyan law, retained for 7 years as required by the Kenya Revenue Authority, even after account deletion. These records are anonymized where possible. We will process deletion requests within 30 days and confirm via email once complete.
Data Retention
We retain your personal data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days of receiving the request. Order records may be retained for longer where required by Kenyan tax or commercial law. Anonymised, aggregated data (which cannot identify you) may be retained indefinitely for analytical purposes.
Cookies
We use essential cookies to keep you signed in and maintain your session on the Platform. We also use PostHog, a product analytics tool, to understand how the Platform is used and improve the experience. PostHog automatically captures interactions such as clicks and page navigation, and records session activity including mouse movement, scrolling, and page navigation. Password fields are always masked and never recorded. PostHog is the only third-party tracking tool we use — this data is used purely for product analytics, not for advertising or marketing. You may disable cookies in your browser settings, but doing so may prevent you from signing in or using core Platform features.
Children
The Saaph Platform is intended for users aged 17 and older. We do not knowingly collect personal information from anyone under 17. If we become aware that a user is under 17, we will delete their account and data promptly. If you believe someone under 17 has registered on our Platform, please contact us at hello@saaph.co.ke.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email (to the address on your account) or via an in-app notice before the changes take effect. The date at the top of this page will always reflect when the policy was last updated. Continued use of the Platform after changes are notified constitutes acceptance of the updated policy.
Contact
If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us: Saaph Commerce Limited Nairobi, Kenya hello@saaph.co.ke