Privacy policy

Advans is operated by [REGISTERED COMPANY NAME], a company incorporated in Kenya (company number [NUMBER]) with its registered office at [ADDRESS].

For the purposes of the Data Protection Act, 2019 we are the data controller for the personal data described in this notice. Our registration with the Office of the Data Protection Commissioner is [ODPC REGISTRATION NUMBER].

You can reach our data protection contact at [PRIVACY EMAIL].

We collect only what the service needs to assess, disburse and recover an advance.

Identity and contact data: your name, national identification number, phone number and email address.

Employment data supplied by your employer: your employee reference, start date, department, net monthly pay, payroll cycle and employment status.

Advance data: the amounts you request, the interest applied, approval decisions, disbursement references and repayment records.

Payment data: the mobile money number funds are sent to, and the transaction identifiers returned by the payment provider.

Technical data: IP address, device and browser information, and log records of how you use the service.

We do not collect special categories of personal data, and we do not ask for your bank passwords, PINs or mobile money PIN. No member of our staff will ever ask you for them.

To verify who you are and confirm your employment, so that an advance is issued to the right person.

To calculate the limit available to you from your salary, your employer's financial terms and any advances you have not yet repaid.

To disburse funds and to reconcile repayment through your employer's payroll deduction.

To meet legal obligations, including anti-money-laundering checks, tax requirements and regulatory reporting.

To detect and prevent fraud and to secure the service.

To improve the service, using aggregated information that does not identify you.

We process your data because it is necessary to perform the contract between you and us when you request an advance; because we must comply with a legal obligation; and because we have a legitimate interest in preventing fraud and running the service safely.

Where we rely on your consent, for example for optional marketing messages, you may withdraw it at any time without affecting the lawfulness of what we did before you withdrew it.

Your employer, to the extent needed to operate payroll deduction. Your employer sees the amounts to deduct and the status of each advance. Your employer does not see your identity documents or your wider application history.

The funding partner funding your advance, in a form that supports their exposure and reconciliation reporting.

Payment and mobile money providers, to move funds to you and to confirm receipt.

Identity verification and credit reference bureaux, where the law requires or permits it.

Service providers who host and support our systems, under written instructions and confidentiality obligations.

Regulators, courts and law enforcement, where we are legally required to disclose.

We do not sell your personal data.

Some of our service providers process data outside Kenya. Where that happens we transfer data only where the receiving country offers adequate protection, or under contractual safeguards that meet the requirements of the Data Protection Act, 2019.

We keep advance and repayment records for [RETENTION PERIOD, e.g. seven years] after your last advance is settled, to meet accounting, tax and regulatory obligations.

Identity verification records are kept for the period required by anti-money-laundering law. Technical logs are kept for [LOG RETENTION PERIOD].

When a retention period ends we delete the data or irreversibly anonymise it.

Under the Data Protection Act, 2019 you have the right to:

be told how your data is used, which is the purpose of this notice;

ask for a copy of the personal data we hold about you;

have inaccurate data corrected;

ask us to delete data where we no longer have grounds to keep it;

object to processing, or ask us to restrict it;

ask us to transfer your data to another provider in a portable format.

To exercise any of these, write to [PRIVACY EMAIL]. We will respond within the statutory timeframe. If you are not satisfied, you may complain to the Office of the Data Protection Commissioner.

The limit available to you is calculated automatically from your salary, the share of it your employer's terms allow, and the principal of advances you have not yet repaid. The app shows you the breakdown.

Whether a request is approved may also be automatic, depending on the approval policy your employer has configured. You may ask for a human review of any automated decision by contacting [SUPPORT EMAIL].

We protect your data with encryption in transit, access controls, audit logging and least-privilege access for our staff. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the sensitivity of the data.

If a breach occurs that is likely to result in a risk to your rights, we will notify the Office of the Data Protection Commissioner and, where required, you.

We use cookies and similar storage that are strictly necessary to sign you in and keep your session secure, and to remember preferences such as your choice of light or dark appearance.

[If analytics or marketing cookies are added, describe them here and provide a consent mechanism before they are set.]

If we change how we use your data we will update this page and revise the date at the top. Where a change materially affects you we will tell you directly before it takes effect.

Questions about this notice, or about the data we hold on you, should go to [PRIVACY EMAIL], or by post to [REGISTERED COMPANY NAME], [ADDRESS].