Privacy Policy

1. Information we collect

Information you give us

• Your name and email address when you register.
• Your M-Pesa phone number when you pay for a plan or request a withdrawal.
• Your task answers, working and any reviews you choose to write.
• Messages you send to our support team.

Information created as you use MaliMines

• Lessons completed, task submissions, review outcomes and earnings.
• Wallet balances, payments, withdrawals and referral activity.
• Basic technical data such as device type, browser, IP address and login times, used for security.

We do not store your password in readable form. Sign-in is handled by Google Firebase Authentication. We never ask for your M-Pesa PIN, and you should never share it with anyone.

2. How we use it

• To create and run your account and show you your dashboard.
• To process plan payments and send withdrawals to your M-Pesa number.
• To review task submissions and credit approved earnings and referral commissions.
• To detect and prevent fraud, duplicate accounts and abuse.
• To answer your questions and send important account or service notices.
• To understand how the platform is used so we can improve it.

We rely on the contract between us to run your account and pay you, on our legitimate interest in keeping the platform secure, and on legal obligations for financial records.

3. Who we share it with

We do not sell or rent your personal data. We share limited information only with:

• Safaricom M-Pesa, to take payments and send withdrawals.
• Google Firebase, to handle secure sign-in.
• Our hosting providers, who store data on our behalf under confidentiality obligations.
• Authorities, when Kenyan law requires it, or to protect members from fraud.

If you write a review and we publish it, only your first name, last initial, plan and rating are shown. Your email address and phone number are never made public.

4. How long we keep it

We keep your account data for as long as your account is open. After you close your account, we delete or anonymise your personal data within 90 days, except payment and withdrawal records, which we keep for up to 7 years as required for tax and accounting purposes.

5. How we protect it

All traffic to MaliMines is encrypted with HTTPS. Access to member data is limited to team members who need it, and admin actions are recorded in an audit log. No system is perfectly secure, so if we ever discover a breach that affects you, we will tell you and the Office of the Data Protection Commissioner as the law requires.

6. Your rights

Under the Data Protection Act, 2019 you have the right to:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct information that is wrong.
• Ask us to delete your data, subject to the records we must keep by law.
• Object to or restrict certain uses of your data.
• Complain to the Office of the Data Protection Commissioner (odpc.go.ke).

To use any of these rights, email support@malimines.com from the email address on your account. We reply within 24 hours and complete requests within 30 days.

7. Cookies

We use a small number of essential cookies to keep you signed in and protect your account. See our Cookie Policy for details.

8. Children

MaliMines is for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will remove it.

9. Changes to this policy

If we make significant changes, we will let you know by email or on your dashboard before they take effect.