Privacy Policy

Last updated: October 6, 2026

KESWAI TECHNOLOGIES ("we", "us", "our") operates the Soko mobile application ("Soko", "the App"). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and your rights under the Kenya Data Protection Act, 2019.

By using Soko, you agree to this Privacy Policy. If you do not agree, please do not use the App.

1. Who we are

Data Controller: KESWAI TECHNOLOGIES
Contact: sokodating@gmail.com

2. Age restriction

Soko is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn that a user is under 18, we will delete their account and data.

3. What data we collect

Account and profile data:

• Name
• Email address
• Date of birth (stored but never shown publicly; only your age is displayed)
• Gender
• Tribe (optional — this may be considered ethnic origin data in some jurisdictions, and providing it is entirely your choice)
• Bio (optional)
• Profile photos
• Location: city or area name, plus approximate geographic coordinates (rounded to about 110 metres) for distance-based matching

Activity data:

• Likes you send and receive
• Matches
• Messages you exchange with matches
• Typing indicators (transient, not stored)
• Last active time
• Users you have blocked or reported

Payment data: When you purchase a subscription, our payment processor collects your M-Pesa phone number and transaction reference. We do not store your M-Pesa PIN, bank account, or card details. We store only the payment status, amount, and a reference number.

Technical data:

• Device model and operating system
• App version
• Crash reports (via Sentry) — stack traces, device information, and error context. We have disabled collection of IP addresses and other identifying information.
• Authentication tokens from Google Sign-In or email/password login

4. Why we collect it

• To create and operate your account
• To match you with other users based on preferences, distance, and filters
• To enable chat with your matches
• To process subscription payments
• To detect and prevent abuse, harassment, fake accounts, and underage use
• To respond to reports and enforce our Terms of Service
• To diagnose crashes and improve the App
• To comply with legal obligations

5. Legal basis

Under the Kenya Data Protection Act, we process your data on the following bases:

• Contract — to provide the App and its services (account, matching, chat)
• Consent — for optional profile fields (tribe, bio) and for storing photos
• Legitimate interest — to prevent abuse, secure the platform, and improve the App
• Legal obligation — to comply with applicable laws

6. Who we share data with

We use the following third-party processors. Each has its own privacy policy and, where required, a Data Processing Agreement with us:

• Google Firebase (Firestore, Authentication, Cloud Functions, Cloud Storage) — database, authentication, file storage, and backend logic. Data stored in the European Union.
• Google Sign-In — social login
• Google Places API — location autocomplete during profile setup
• Paynecta — M-Pesa payment processing (Kenya)
• Sentry — crash reporting (EU, Germany)

We do not sell your personal data. We do not share your data with advertisers.

We may disclose data if required by law, court order, or to protect the safety of our users.

7. Cross-border transfers

Firebase and Sentry store data in the European Union. Paynecta processes payments in Kenya. When data leaves Kenya, we rely on the processors' standard contractual clauses and data protection agreements to ensure adequate protection.

8. How long we keep data

• Account and profile data: until you delete your account
• Messages and matches: until you delete your account or unmatch
• Payment records: retained as required for tax and accounting
• Crash reports: retained by Sentry for 30 days
• Blocked user records: until you unblock

When you delete your account, we delete your profile, matches, and messages. Backup copies are purged within a reasonable period.

9. Your rights

Under the Kenya Data Protection Act, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and data (via Profile → Delete Account)
• Object to processing or restrict it
• Withdraw consent for optional processing
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

To exercise these rights, email sokodating@gmail.com. We respond within 30 days.

10. Security

We protect your data using encrypted connections (HTTPS) for all traffic, Firestore security rules restricting access to your data, restricted API keys tied to the Android app signature, and two-factor authentication on our internal accounts.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately.

11. Children

Soko is strictly for adults 18+. We do not knowingly collect data from anyone under 18. If you believe we have, contact sokodating@gmail.com and we will delete it.

12. Content you upload

Photos you upload are stored in Firebase Cloud Storage and are visible to other users of Soko. Do not upload photos containing personal information (ID documents, addresses) or anyone else's photo without permission.

13. Changes to this policy

We may update this Privacy Policy. Material changes will be notified in-app. The "Last updated" date at the top reflects the current version.

14. Contact

KESWAI TECHNOLOGIES
Nairobi, Kenya
Email: sokodating@gmail.com