Privacy policy

Who we are

Mwangaza Yield is operated by Danico Ventures Ltd (company no. PVT-EYUM572, incorporated 10 March 2019 under the Companies Act, 2015), which also runs JiPange and is the data controller for anything described on this page. Business address: JKIA Cargo Centre, Nairobi. Write to us at info@mwangazadigital.org — including to exercise any of the rights set out below.

The short version

Mwangaza Yield has no user accounts and no login. Everything you enter — amounts, holdings, prices, goals — is computed on your own device and saved only in your browser's local storage (IndexedDB). It never leaves your phone or computer.

There is exactly one thing we store on a server, and only if you switch it on: price alerts. That is set out in full below rather than tucked into a clause, because a privacy notice that omits the one server-side thing is not a privacy notice.

This page follows the duty to notify in section 29 of Kenya's Data Protection Act, 2019 — what is held, why, who else receives it, how it is protected, and what you can do about it.

What we store, and where

• Your portfolio and imported CSV data — stored locally in your browser only. Clearing your browser data or tapping “Clear all holdings” deletes it permanently. We cannot recover it, because we never had it.
• Prices you record — the bond prices you enter in your price book stay in the same local database as your holdings. They are never uploaded, and we never fetch prices on your behalf, from anyone. We publish no market prices at all.
• Market data — bond, bill, auction and macro figures are downloaded to your device and cached so the app works offline. This is public information flowing to you, not data flowing from you.
• No cookies are set for tracking, advertising or profiling.

What our host can see

The site is served as static files by Netlify. Like any web host, Netlify processes standard server request data (IP address, browser type, pages requested) to deliver the site and protect it from abuse. Fonts are served from our own domain rather than a third party, so loading a page does not notify anyone else that you did.

We run our own tool counter — a first-party tally of which tools get used, hosted alongside the site with no third party involved. It sets no cookies, records no IP address, and carries no identifier of any kind: the stored record is a name like “calculator” next to a number, per day. Two visits by you are indistinguishable from one visit each by two people — deliberately, which is why this page carries no consent banner. It exists for one reason: to know which tools are worth continuing to build. If your browser sends Do Not Track or Global Privacy Control, we do not count you at all.

It counts tool use only. It cannot see the figures you type, the holdings you import or the goals you set, because those never leave your device — that is a property of how the app is built, not a promise about how we behave.

Price alerts — we now store nothing at all

Until July 2026 turning on alerts issued a push endpoint: a long URL the browser vendor's push service could deliver to, plus two keys. We held that endpoint, those keys and the market-wide rules you chose. It never carried anything about your money — but an endpoint identifies a specific person's device, and that makes it personal data whatever else it does not contain.

It is gone. The endpoint, the keys, the stored rules, the server that would have sent them and the Netlify Blobs store that held them were all removed. Alerts are now worked out entirely on your device from the published calendar and rate feed, and raised when you open Mwangaza Yield — which is how coupon and maturity alerts have always worked, because those need your holdings and we would not hold those either.

The trade is deliberate and worth stating plainly: alerts no longer reach you while the app is closed. In exchange there is nothing here to lose, sell, or be compelled to hand over, and no question about whether we are a data controller — because we hold no personal data at all. Auction bid windows carry five days' notice and T-bill results are weekly, so an alert you see next time you open the app is still an alert in time.

Your rights

Section 26 of the Data Protection Act, 2019 gives you the right to be informed about how your data is used, to access it, to object to its processing, and to have inaccurate data corrected or deleted. This app is built so that most of those are things you can do yourself, immediately, without asking us:

• Access and correction — your data is on your device, in front of you. Every figure can be edited on the page that shows it.
• Deletion — “Clear all holdings” on the portfolio page, or clearing site data in your browser. There is nothing to delete on our side, for alerts or anything else, because nothing of yours is stored there.
• Objection — do not turn on alerts. Nothing else about the app sends anything anywhere, so there is nothing else to object to.

If you believe your rights have been infringed you may complain to the Office of the Data Protection Commissioner, the supervisory authority for data protection in Kenya. You do not have to come to us first.

Links away from the app

We link to the Central Bank of Kenya, the National Treasury, KNBS, CBK's WhatsApp channel, and our own WhatsApp channel, Pesa Smart KE, which we run jointly with JiPange. Once you follow a link you are on their service, under their privacy policy, not ours. Sharing a summary to WhatsApp hands that text to WhatsApp — we neither see nor keep a copy.

Following our channel does not identify you to us. WhatsApp does not show channel admins who their followers are, so we never see your number and are never given a list — following is the one way to hear from us that costs you nothing in privacy. It is a broadcast: we post, you read. It carries market news only, never anything about your own holdings, because working those out needs data this app deliberately never receives.

Children

The app is intended for adults able to hold a CSD account. We do not knowingly collect information from anyone — a promise that is easy to keep given we collect none at all.

Your rights

Kenya's Data Protection Act, 2019 gives you rights over personal data held about you. Because we hold none, there is nothing for us to disclose, correct or erase on request — your data is already exclusively in your own hands. If that ever changes, this page will change first, and the date above will say so.

Contact

Questions about this policy can be raised through Support.