Privacy Policy

Last updated: 12 November 2026. WifiMoney is built so that you can run a Wi-Fi business without collecting your customers’ names or phone numbers.

What we store about end customers

• A generated session or payment ID.
• The package, router, timestamps, data used and the M-Pesa reference.
• A device-ID hash: a one-way SHA-256 hash of the device MAC scoped to your operator account, used for payment history, unique-device counts and analytics.
• The raw device MAC only while a session is active or being authorised, because the router needs it to let that device online.

The raw MAC is never shown in the operator dashboard or returned by the public API. It is removed from payment records shortly after the session ends (one day of grace for a late disconnect), and from router event logs by the retention job; the tenant-scoped hash remains for reconciliation and analytics. We do not store end-customer names, email addresses or phone numbers. The phone number is passed in memory to Safaricom only to start the M-Pesa prompt, then discarded. Payments are matched by the M-Pesa reference and the device that paid.

Safaricom processes the phone number to run the M-Pesa prompt under its own terms, and the network operator can see payers in their own M-Pesa statement.

What we store about you

As an operator you give us your business name, email, password hash, network settings, package prices and, where you enable them, your own M-Pesa Daraja credentials. Credentials are encrypted at rest and are never shown to end customers.

Why we store it

To authenticate you, operate the service, match payments to sessions, prevent abuse, keep an auditable ledger and meet legal obligations. We do not sell personal data.

Retention

Session and payment records are retained for up to 12 months. The raw device MAC is removed from payment records one day after the session expires (or one day after a failed, cancelled or expired attempt); a 12-month retention job removes any remaining device identifiers and the short-lived session password. The tenant-scoped device hash and financial facts remain so collections can be reconciled. The payment flow does not write a phone number or phone hash. Financial ledger entries are kept for the period required by Kenyan tax law.

Your rights

Under the Kenya Data Protection Act, 2019 you may ask for a copy, correction or deletion of your personal data. Email support@wifimoney.cloud. A deletion request removes the account, tenant settings and personal identifiers; anonymised financial records are retained where the law requires.

Contact

Purple Tomato Technologies, Nairobi, Kenya. Privacy questions: support@wifimoney.cloud.