Legal
Privacy Policy
Last updated: 1 March 2026
This Privacy Policy explains how Nirudishie collects, uses, and protects your personal information when you use our loan tracking platform.
1. Information We Collect
When you create a Nirudishie account, we collect your name, email address, and password (stored as a bcrypt hash). When you add a loan, we collect the borrower's name, email address, loan amount, due date, and any notes you provide. We automatically collect certain usage data such as IP address, browser type, and pages visited to help us improve the platform.
2. How We Use Your Information
We use your information to operate and improve the Nirudishie platform, send automated payment reminder emails on your behalf, process repayment logging via unique tracking links, communicate with you about your account, and comply with legal obligations under Kenyan law including the Data Protection Act, 2019.
3. Data Sharing
We do not sell, rent, or trade your personal data to third parties. We may share data with service providers who assist us in operating the platform (for example, email delivery providers and cloud hosting providers), but only to the extent necessary to perform those services. All sub-processors are contractually required to protect your data.
4. Data Storage and Security
Your data is stored on servers located within the European Economic Area and is protected using AES-256 encryption at rest and TLS 1.3 encryption in transit. We maintain access controls, audit logs, and regular security reviews to protect against unauthorised access. No system is completely secure, and we encourage you to use a strong password and enable two-factor authentication.
5. Data Retention
We retain your account data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law. Loan records may be retained in anonymised form for statistical purposes.
6. Your Rights
Under the Kenya Data Protection Act, 2019, you have the right to access the personal data we hold about you, correct inaccurate data, request deletion of your data, object to processing, and lodge a complaint with the Office of the Data Protection Commissioner (ODPC). To exercise these rights, contact us at hello@nirudishie.com.
7. Cookies
We use essential cookies to keep you logged in and to protect against cross-site request forgery. We use analytics cookies (with your consent) to understand how people use Nirudishie so we can improve it. See our Cookie Policy for details.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. Continued use of Nirudishie after the effective date of any changes constitutes your acceptance of the updated policy.
9. Contact
If you have questions about this Privacy Policy or how we handle your data, please contact our Data Protection Officer at hello@nirudishie.com or write to us at Nirudishie, Nairobi, Kenya.
Questions? Contact us or see our Cookie Policy.