Privacy Policy

Last updated: 6 October 2026

1. Introduction & Scope

This Privacy Policy explains how Mums Club KE ("we", "us", "our") collects, uses, shares and protects personal data when you use our mobile application and any related websites or admin portals (together, the "Service"). It applies to everyone who uses the Service, including mums using the community and FitMums KE, employers and househelps using KaziConnect, group administrators, county revenue officers, and people whose details are given to us by a user, such as a househelp's referees.

We process personal data in line with Kenya's Data Protection Act, 2019 and its regulations. By creating an account you confirm you have read this policy. Where we rely on your consent (for example for sensitive data), we ask for it separately, in the app, at the point it's needed.

2. Who We Are

The Service is operated by Exciteric Int, registered in Kenya, which is the data controller for the personal data described here. For any privacy question or request, contact us using the details in Section 19.

3. The Short Version

• We collect what we need to run the app, and we do not sell your personal data.
• FitMums KE photos are private by default. They're stored separately from all other media and only shown to others if you choose "Public". Location and camera details are stripped from every photo.
• KaziConnect phone numbers stay hidden until a househelp and an employer have agreed to talk. Referees' numbers are only shown to an employer the househelp has accepted, and to our verification team.
• Tribe / cultural background is optional, and it is never shown to employers or used to search for househelps.
• FitMums KE and KaziConnect are for adults (18+) only.
• You can delete your account at any time from the app, which deletes your FitMums KE and KaziConnect data with it.

4. Information We Collect

Account & profile information

• Name, username, email address, and password (stored only as a salted hash; we never see your plain-text password)
• Date of birth, used to confirm you meet the minimum age for the Service and for features with an 18+ limit (see Section 14)
• Gender, bio, county and sub-county, and other optional profile details you add
• Profile photo / avatar
• A phone number, if you add one (for example on a KaziConnect profile)

Financial & wallet information

• Your in-app wallet balance and transaction history (deposits, withdrawals, subscriptions, boost purchases, contest winnings)
• The M-Pesa phone number you use to deposit or withdraw
• A 4-digit withdrawal PIN, stored only as a salted hash
• We do not collect your M-Pesa PIN, card numbers or banking credentials (see Section 9)

Content you create

• Posts, photos, videos, reels and stories, with any captions or styling
• Comments, reactions, reshares, reviews and direct messages
• Reports you file about other users or content
• Information you add in FitMums KE and KaziConnect, described in Sections 5 and 6

Technical & usage information

• A device push-notification token, if you enable notifications
• Basic request metadata (timestamps, app/API version, IP address used for rate limiting and abuse prevention)
• Approximate location, only if you allow it (see Section 10)

5. KaziConnect (Househelp Marketplace)

KaziConnect connects mums looking for a househelp ("employers") with people looking for domestic work ("househelps"). Each user chooses one role, and what we collect depends on that role.

5.1 If you are a househelp

When you create a househelp profile, we collect:

• Identity & contact: the name you work under, a profile photo of yourself, your age, your phone number, and your county and sub-county
• Work preferences: salary expectation and currency, sleep-in or day-scholar arrangement, how many children you can care for, preferred off days, years of experience, skills, and a short bio
• Referees: the name, relationship to you and phone number of 1 to 3 people who can vouch for you
• Certificates (optional): the name, issuer and year of any certificates you list
• Tribe / cultural background (optional): see Section 7
• Your activity: requests and messages from employers, your answers to them, jobs you apply for and your application messages, and reviews employers leave about you

Age check. The age you enter must match the date of birth on your account. We do this to keep KaziConnect adults-only and to protect against child labour.

Verification. Before employers can see your profile, our team reviews it. This may include calling one or more of your referees. Verification is a basic check that the profile looks genuine; it is not a criminal record, police clearance or employment-history check, and employers are told this.

5.2 If you are an employer

• Your account name, county and profile photo
• Househelps you shortlist, and the requests and messages you send them
• Job posts you publish: a title and description, work arrangement, salary range, number of children and their ages, location, off days offered, skills needed and a start date
• Applications you receive and how you respond to them, and any reviews you write

Please don't include children's names, photos, your exact address, or contact details in job posts. The app blocks phone numbers and email addresses in job posts and applications.

5.3 Who sees what in KaziConnect

5.4 Referees

If you list someone as a referee, you confirm that they have agreed to it and to being contacted by us and by employers you accept. We use referee details only to verify the profile and to let an accepted employer check references. A referee can ask us at any time to remove their details (Section 19); we will remove them and let the househelp know so she can add someone else.

5.5 What we are not

We provide a platform for employers and househelps to find each other. We are not an employment agency and not a party to any employment agreement made through the Service. We don't charge househelps to find work, and no one should ask for a "placement fee" through the app; please report anyone who does.

6. FitMums KE (Fitness & Health Challenge)

• Before and after photos of yourself, with the dates of your journey, the number of days it took, your goal, an optional story, and an optional weight change
• Daily check-ins (the date, and an optional short note)
• Cheers, weekly votes and badges: who cheered or voted for which transformation, and badges you earn
• Meal plans you share or save

How your photos are protected:

• Transformations are private by default. A private transformation and its photos are visible only to you.
• Photos are stored in a separate, non-public store and are only ever delivered to a signed-in adult who is allowed to see them. They are never placed at a public web address.
• Every photo is re-processed when you upload it, which removes hidden data such as GPS location and phone model.
• If you make a transformation public, other adult FitMums KE users can see it with your name and profile photo, cheer it and vote for it. You can switch it back to private, or delete it, at any time.
• Our moderators open a private photo only if that transformation has been reported to us, and only as far as needed to review the report.
• Photos you upload but never attach to a transformation are deleted automatically within about a day.

Leaderboards. Weekly and monthly leaderboards show the name and profile photo of the top participants, ranked automatically by check-ins, cheers received and votes received. Rankings only decide who gets a badge; they have no other effect on you.

Not medical advice. Meal plans and nutrition values are approximate guidance. Talk to a health professional before major changes, especially while pregnant or breastfeeding.

7. Sensitive Personal Data

The Data Protection Act treats some kinds of data as sensitive, including ethnic or social origin and health information. Two features can involve it:

• Tribe / cultural background (KaziConnect). This field is optional. If you fill it in, we process it only with your consent, which you give on the application form. It is visible only to you and our verification team. It is never shown to employers and can't be used to search for or filter househelps. You can clear it at any time by editing your profile.
• Body photos and weight (FitMums KE). Before-and-after photos and weight change can reveal information about your health. We process them only with your consent, given when you join FitMums KE, and you decide whether each one is private or public.

You can withdraw consent at any time by removing the information or deleting it in the app. This doesn't affect processing that happened before you withdrew it.

8. How We Use Your Information & Our Legal Bases

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Househelp verification and moderation decisions are made by people.

9. M-Pesa & Payment Processing

Wallet deposits and withdrawals are processed through Safaricom's M-Pesa Daraja platform. When you deposit, we send an STK push to your phone and you enter your M-Pesa PIN directly with Safaricom; we never see it. When you withdraw, we initiate a business-to-customer (B2C) payment to the phone number you provide. Safaricom keeps its own records under its own privacy policy. A withdrawal service fee, applicable tax and a minimum withdrawal amount apply; see our Terms & Conditions for current figures.

FitMums KE and KaziConnect are currently free. Salaries agreed between employers and househelps are paid outside the app, and we do not process them.

10. Location Data

If you allow the app to access your device's location, we use it to show nearby users and location-relevant content. You can decline or later revoke location access in your device settings, and the rest of the Service keeps working. KaziConnect and job posts use only the county and sub-county you type in, never your device location.

11. Who Can See Your Information

• Other users, as described in each feature: your public profile and posts; members of groups you join; the KaziConnect visibility rules in Section 5.3; and public FitMums KE transformations in Section 6.
• Our team: authorised staff can access data where needed to verify househelp profiles, review reports, provide support or keep the Service secure. Access is limited to staff whose role needs it, and moderation actions are logged.
• County revenue officers: aggregate, anonymised commission figures for their county only.
• Service providers: Safaricom (payments), Expo (push notifications), our email provider and our hosting provider, each receiving only what it needs to perform its service for us.
• For legal reasons: if required by law or legal process, or to protect the rights, safety or property of Mums Club KE, our users or the public, for example a credible report of harm to a child or worker.
• With your consent: in any other case where you've explicitly agreed.

We do not sell your personal data, and we do not share it with advertisers. Sponsored content is targeted using broad profile details (such as county and age range) inside our own systems.

12. How Long We Keep Information

Backups may hold deleted data for a short period before they are overwritten.

13. Your Rights & Choices

Under the Data Protection Act, 2019 you have the right to:

• Be informed about how your data is used (this policy)
• Access the personal data we hold about you
• Correct inaccurate data (most fields, including your KaziConnect profile, are editable in the app)
• Delete your data, by deleting your account in the app or asking us, subject to Section 12
• Object to or restrict certain processing
• Data portability: receive a copy of the data you gave us in a commonly used format
• Withdraw consent for sensitive data at any time (Section 7)

Useful in-app controls: make a FitMums KE transformation private or delete it; set your KaziConnect availability to "Not looking" to hide your profile; clear your tribe field; block or report any user.

To exercise a right, contact us (Section 19). We will respond within the time limits set by law, and we may need to confirm your identity first.

14. Age Limits & Children

• The Service is not for children under 13. We ask for a date of birth at signup and delete data we learn was collected from a child under 13.
• FitMums KE and KaziConnect are for adults aged 18 and over only. We check this against the date of birth on your account, and a househelp's stated age must match it.
• FitMums KE photos must show only the adult posting them, and never a child.
• Employers may describe how many children need care and their ages, but should not post children's names or photos.

15. Security & Data Breaches

We protect your data with measures including: salted hashing of passwords and PINs; a separate, access-controlled store for FitMums KE photos with metadata removed; role-based access checks on every KaziConnect and FitMums KE request; contact details hidden until both sides agree; validation of all input; rate limits on sensitive actions; and role-restricted access for our team, with moderation actions logged. No system is perfectly secure, so we can't guarantee absolute security.

If a personal data breach is likely to put you at risk, we will notify the Office of the Data Protection Commissioner within 72 hours of becoming aware of it, and tell affected users without undue delay, with advice on steps they can take.

16. Cookies & Sessions

The mobile app signs you in with a securely stored session token on your device, not browser cookies. Our web-based admin and officer portals use an httpOnly session cookie only to keep authorised staff logged in. Public pages like this one don't use tracking cookies.

17. International Data Transfers

Some service providers (for example push-notification and cloud-infrastructure providers) may process data outside Kenya. Where this happens, we transfer only what is necessary and take steps required by the Data Protection Act to ensure your data keeps an appropriate level of protection.

18. Changes to This Policy

We may update this policy as the Service changes. If we make material changes, such as using your data for a new purpose, we'll update the date at the top and tell you in the app before the change takes effect. Where a change needs your consent, we'll ask for it.

19. Contact Us & Complaints

Questions, requests (including from referees), or concerns about your personal data can be sent to privacy@mumsclubke.com or by post to P O Box 97380 - 80112, Mombasa, Kenya. Please write "Privacy request" in the subject line.

If you're not happy with our response, you can complain to the Office of the Data Protection Commissioner (ODPC), Kenya, at www.odpc.go.ke.