Privacy policy
What we collect, why, and the choices you have. Written to follow the Kenya Data Protection Act, 2019.
Last updated 20 October 2026
Who we are
Kwikri (“we”) provides online business software at kwikri.co.ke. For the account details you give us, we are the data controller. For the records you keep in Kwikri about your own customers, staff and suppliers, you are the data controller and we process that data on your behalf.
What we collect
- Account details: business name, your name, email, phone, username and a one-way hash of your password.
- Billing: your package, payment amounts, dates and payment references. Card and M-Pesa details are handled by our payment provider, Paystack; we do not see or store card numbers.
- Your business records: customers, products, invoices, sales, stock, employees and payroll that you enter.
- Security and usage: sign-in times, IP addresses for blocking repeated wrong passwords, an activity log of changes, and whether a document link was opened.
- Messages you send us through the contact form or email.
Why we use it
- To provide the service you signed up for, including sending emails you ask us to send.
- To keep accounts secure: email confirmation, sign-in codes, password resets and fraud prevention.
- To bill you and send receipts and reminders about your subscription.
- To answer your questions and fix problems.
We do not sell personal data, and we do not use your business records for advertising.
Who we share it with
Only service providers we need to run Kwikri: our hosting provider, Paystack for payments, and email delivery. Each processes data only to provide their service to us. We disclose data to authorities only when Kenyan law requires it.
How long we keep it
We keep your account and records while your account is open, so you can still see them after a subscription ends. When you ask us to close your account, we delete your records within 30 days, except billing records we must keep for tax purposes. Download a copy first from My account.
Your rights
You can ask to see, correct, download or delete your personal data, object to its use, or withdraw consent where we rely on it. Email hello@kwikri.co.ke. If you are not satisfied with our answer you can complain to the Office of the Data Protection Commissioner (ODPC).
If you keep data about other people in Kwikri, such as staff salaries or customer phone numbers, you are responsible for having a lawful reason to keep it and for answering their requests. We will help you do that.
Security
Connections are encrypted, passwords are hashed, each business is kept separate, and two-step sign-in is available to every user. See Security for details.
Cookies
We use a sign-in cookie to keep you logged in, and a cookie to remember a trusted device if you choose that. We do not use advertising or tracking cookies.
Changes
If we change this policy in a way that matters, we will tell account holders by email before it takes effect.