Privacy Policy

Effective Date: January 9, 2026

Instant Pesa ("we," "our," or "us") provides a bridge for fund transfers between MPesa and Deriv. This policy outlines our commitment to your data privacy.

1. Information We Collect

• Personal Identifiers: Name, phone number, and Deriv Account ID.
• Financial Information: Transaction amounts, timestamps, and status for MPesa-to-Deriv transfers.
• Device Information: We collect device identifiers to prevent fraud and secure your account.

2. How We Use Data

Your data is used strictly to facilitate transactions, verify your identity via OTP, and provide customer support. We do not sell your data to third parties.

3. SMS & OTP Verification

We use the Google SMS Retriever API to verify your phone number. This method does not give us access to your private messages or contact list. We only receive the specific OTP message sent by our servers.

4. Data Security

All data transmitted between the app and our servers is encrypted using Transport Layer Security (TLS/HTTPS). We implement strict internal access controls to protect your financial records.

5. Account & Data Deletion

You have the right to delete your account and associated data. To request deletion, please use the "Delete Account" feature in the app settings or contact us at the email below. Data will be purged within 30 days, except for transaction logs required by law for audit purposes.