Soko Predict

Privacy Policy

Last updated: 7 May 2026

1. Introduction

Soko Predict ("we", "us", "our") is committed to protecting the privacy of our users ("you", "your"). This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you access or use the Soko Predict platform, including our website, mobile applications, and related services (collectively, the "Platform"). This policy is designed to comply with the Kenya Data Protection Act, 2019 and other applicable data protection laws.

2. Information We Collect

We collect the following categories of personal information:

  • Account Information: Name, email address, phone number, date of birth, and any other information you provide during registration or account updates.
  • Identity Verification: Government-issued identification documents, photographs, and biometric data as required for Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance.
  • Transaction Data: Records of your trades, deposits, withdrawals, M-Pesa transaction references, wallet balances, and payment history.
  • Technical Data: IP address, browser type and version, device identifiers, operating system, referral URLs, time zone settings, and usage patterns.
  • Communications: Records of your correspondence with our support team, feedback, and survey responses.
  • Cookie Data: Information collected through cookies and similar tracking technologies as described in our Cookie Policy.

3. How We Use Your Information

  • To create, maintain, and secure your account
  • To process transactions, deposits, and withdrawals via M-Pesa and other payment methods
  • To verify your identity and comply with KYC/AML requirements
  • To operate, maintain, and improve the Platform
  • To detect, prevent, and investigate fraud, market manipulation, and other prohibited activities
  • To communicate with you about your account, transactions, and Platform updates
  • To comply with legal obligations, regulatory requirements, and law enforcement requests
  • To enforce our Terms of Service and protect our legal rights
  • To conduct research and analytics to improve our services

4. Legal Basis for Processing

We process your personal data on the following legal bases: (a) performance of our contract with you (account management, transaction processing); (b) compliance with legal obligations (KYC/AML, tax reporting, regulatory compliance); (c) our legitimate interests (fraud prevention, platform security, analytics); and (d) your consent (marketing communications, non-essential cookies).

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

  • Payment Processors: M-Pesa (Safaricom PLC) and other payment providers to process your transactions
  • Identity Verification Providers: Third-party KYC/AML service providers
  • Cloud Infrastructure: Hosting and data storage providers operating under strict data processing agreements
  • Legal and Regulatory Authorities: When required by law, court order, or regulatory inquiry
  • Professional Advisors: Lawyers, auditors, and consultants under confidentiality obligations

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements. Transaction records and KYC data are retained for a minimum of seven (7) years following account closure in compliance with Anti-Money Laundering regulations. After the retention period, data is securely deleted or anonymized.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, regular security assessments, and employee training. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Under the Kenya Data Protection Act and applicable laws, you have the right to:

  • Access your personal data and obtain a copy
  • Rectify inaccurate or incomplete personal data
  • Delete your personal data (subject to legal retention requirements)
  • Object to or restrict processing of your personal data
  • Data portability — receive your data in a structured, commonly used format
  • Withdraw consent at any time (without affecting the lawfulness of prior processing)
  • Lodge a complaint with the Office of the Data Protection Commissioner of Kenya

To exercise any of these rights, contact us at privacy@sokopredict.com.

9. International Data Transfers

Your data may be transferred to and processed in countries outside Kenya for hosting and infrastructure purposes. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and data processing agreements, to protect your data in compliance with the Kenya Data Protection Act.

10. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete such information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or via email. The "Last updated" date at the top of this page indicates when this policy was last revised.

12. Contact Us

For questions about this Privacy Policy or our data practices, contact our Data Protection Officer at privacy@sokopredict.com.