Privacy Policy

When you create an account we collect your username, email address, phone number, and a one-way hash of your password (we never store the password itself). Using the service adds: payment metadata from M-Pesa (checkout IDs, amounts, promo codes — never your M-Pesa PIN), your slips and picks, referral relationships, device session details (IP address, browser user agent, approximate location), notification history, support conversations, and an activity log of security-relevant events such as logins and OTP verifications.

We use your data to run the service: authenticating you with OTP codes over email, processing day-pass payments, unlocking and grading your slips, crediting referrals, answering support tickets, preventing fraud and abuse, and sending service notifications (for example when fixtures you have no paid picks on are about to kick off). We do not sell your personal data, and we do not use it for third-party advertising.

Payment processing is handled by Safaricom M-Pesa, which receives your phone number and the amount. OTP delivery goes through our email provider. Match data providers receive no personal data at all. Beyond that, we disclose personal data only if required by Kenyan law or to protect the service against fraud.

Passwords are hashed with bcrypt; sessions use signed tokens tied to a revocable device record (you can review and revoke devices from your profile). Data is retained while your account is active. Payment and grading records may be kept longer where bookkeeping or fraud-prevention obligations require it.

We use browser local storage for one thing: keeping you signed in (your session token and cached profile). No tracking cookies, no third-party analytics scripts.

Under the Kenya Data Protection Act, 2019, you may request access to, correction of, or deletion of your personal data, and you may withdraw consent by closing your account. Raise any request through the support desk and we will respond within 30 days. Deleting your account removes personal identifiers; anonymised prediction and grading statistics may remain in our public track record.

Tips Kali is for adults aged 18 and over; we do not knowingly hold data on minors and will delete such accounts on discovery. We may update this policy; material changes will be announced in the app. See also our Terms of Service.