Privacy Policy

Last updated 7 September 2026

This policy explains what personal data M-Plus collects, why, who it is shared with, and the rights you have over it under Kenya’s Data Protection Act, 2019.

1. Who is responsible

M-Plus is the data controller for the information described here. Contact: support@viongozi.qpcgroupafrica.com.

2. What we collect

From aspirants, when registering a campaign:

• Name, email address and M-Pesa phone number.
• Campaign details — the seat sought, party, county, constituency, ward, your description, and any poster you upload.
• Identity documents: your national ID number, photographs of the front and back of your ID, and a photograph of yourself holding it.
• A password, stored only as a one-way hash. We never hold your password itself.

From donors, when donating:

• The M-Pesa phone number used to pay, the amount, and the M-Pesa receipt number.
• A name and message, only if you choose to enter them.
• Nothing else. We do not receive your name from Safaricom, and we never see your M-Pesa PIN.

3. Why we hold it, and on what basis

• Identity documents — to confirm an aspirant is who they claim before letting them collect public money. Held on the basis of your consent, given at registration, and our legitimate interest in preventing fraud.
• Payment details — to process donations and payouts, and to keep an accurate financial record. Necessary to perform the service you asked for, and to meet record-keeping obligations.
• Phone numbers — to send transaction notifications about donations you made or received.

4. What is public, and what is not

A published campaign page publicly shows the aspirant’s name, seat, area, party, description, poster, and total raised. A donation may appear on the campaign’s supporter list showing a first name — or a masked number such as 25472*****48 — with the amount. If you tick “give anonymously”, your name is not shown to the campaign or to the public.

Identity documents are never public. ID numbers, ID photographs and selfies are visible only to platform administrators, and are not shown on campaign pages, in the aspirant’s own portal, or in any public API response. Full donor phone numbers are never shown to aspirants — only a masked form.

5. Who else sees your data

• Safaricom PLC — payment instructions, to move money over M-Pesa.
• Roberms Bulk SMS — a phone number and message text, to deliver notifications.
• Our hosting provider — as part of running the servers.

We do not sell personal data, and we do not share it with political parties, campaigns or third parties for marketing.

6. How long we keep it

Financial records — donations, payouts and ledger entries — are kept for at least seven years, as ordinary accounting practice and to resolve disputes. Identity documents are kept while a campaign is active and for a period afterwards for fraud investigation, then deleted. You may ask us to delete data we are not required to retain.

7. Security

The site is served over HTTPS. Passwords are hashed with argon2id. The financial ledger is append-only at the database level, so records of money movement cannot be quietly altered. Access to identity documents is restricted to administrator accounts.

8. Your rights

Under the Data Protection Act, 2019 you may ask for a copy of your data, ask us to correct it, ask us to delete it, object to how it is used, or withdraw consent. Write to support@viongozi.qpcgroupafrica.com. If you are unsatisfied, you may complain to the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.

9. Storage on your device

We store a sign-in token in your browser so you stay signed in. We do not use advertising or tracking cookies.