Privacy Policy

01 Introduction

By registering for and using the App, you consent to the practices described in this Privacy Policy.

02 Who We Are

We are the data controller responsible for your personal information. For any questions or requests regarding your personal data, please contact us using the details above.

03 Information We Collect

We collect the following categories of personal and sensitive information:

Identity and account information

• Full name
• National ID number
• Staff / Employee number
• Membership number

Contact information

• Phone number
• Email address (if provided)

Authentication data

• One-Time Password (OTP) generated at each login for identity verification

Profile information

• Profile photograph (uploaded by you)

Pension and financial information

• Account balances
• Contribution history
• Retirement projections
• Beneficiary details (names and related information you or the Fund have on record)

Technical information

• Device information and identifiers used to deliver and secure the App

04 How We Collect Your Information

• Information provided directly by you (e.g., profile photo, contact updates)
• Information already held by the Fund as part of your membership records (e.g., ID number, staff number, contributions, beneficiaries)
• Information generated automatically during use (e.g., OTPs, device data)

05 How We Use Your Information

We use your information to:

• Verify your identity and authenticate each login (via OTP)
• Display your account balances, profile, and account information
• Show your contribution history and retirement projections
• Display your registered beneficiary details
• Allow you to view and update your profile, including your profile photo
• Provide Fund contact information and support
• Maintain the security and integrity of the App
• Comply with legal, regulatory, and pension scheme obligations

We do not use your data for advertising, and we do not sell your personal information.

06 Sharing and Disclosure

We do not sell or rent your personal data. We may share your information only in the following circumstances:

• With service providers who help us operate the App (e.g., hosting, SMS/OTP delivery, technical support), under confidentiality obligations
• With the Fund's administrators, trustees, or custodians as necessary to manage your pension
• Where required by law, regulation, or a valid legal request
• To protect the rights, safety, and security of the Fund and its members

07 Data Storage and Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit and at rest, secure authentication and access controls.

While we take reasonable steps to safeguard your information, no system is completely secure, and we cannot guarantee absolute security.

08 Data Retention

We retain your personal information for as long as you remain a member of the Fund and for any additional period required by law, regulation, or the rules governing the pension scheme. OTPs are short-lived and expire shortly after generation.

09 Your Rights

Under the Data Protection Act, 2019 of Kenya, you have the right to:

• Be informed of the use of your personal data
• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of certain data (subject to legal and pension retention requirements)
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us using the details in Section 2. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.

10 Account and Data Deletion

You may request deletion of your App account and associated app-specific data (such as your uploaded profile photo) by contacting us at info@kppf.co.ke.

Please note that certain information must be retained as part of your legal pension records and cannot be deleted while you remain a member or where retention is required by law.

11 Children's Privacy

The App is intended only for registered adult members of the Fund and is not directed at children under the age of 18. We do not knowingly collect personal information from children.

12 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted within the App and on this page, with an updated "Last Updated" date. Continued use of the App after changes take effect constitutes acceptance of the revised policy.

13 Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, contact us at: