1. Introduction
TokenFlex Ltd ("TokenFlex", "we", "us") operates the TokenFlex platform. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the Data Protection Act, 2019 (Kenya).
2. Information We Collect
- Name, phone number, email address, and KPLC meter number
- Token loan amount requested (maximum KSh 1,000)
- Repayment status and transaction references
- Device and app usage data
3. How We Use Your Information
We use your data to:
- Process and deliver your KPLC token requests
- Manage repayments via TUMA and M-Pesa
- Send important transactional SMS (token codes, reminders)
- Provide customer support
- Comply with legal and regulatory requirements
4. Data Sharing
We do not sell your data. We may share information only with:
- Payment partners (TUMA, M-Pesa, NCBA)
- SMS gateway (Africa’s Talking)
- Regulators (CBK, ODPC) when legally required
5. Data Security
We use encryption, secure servers, and strict access controls to protect your information.
6. Your Rights (Under Kenya DPA)
You have the right to access, correct, delete, or object to the processing of your data. To exercise these rights, contact us at info.tokenflex@gmail.com.
7. Data Retention
We keep your data only as long as needed for the loan or as required by law (maximum 3 years after full repayment).
8. Contact Us
TokenFlex Ltd
Email: info.tokenflex@gmail.com
Phone: +254 716 678 633
Nairobi, Kenya