Privacy

Last updated 19 October 2026

Kadi Yangu runs Kadi Yangu. This page says what we collect, why, and what you can do about it, in line with Kenya's Data Protection Act, 2019.

If you have a card

• What's on your card — name, photo, roles, numbers, emails and links. It's public to anyone with your card's link or QR.
• Your phone number and email — to send your manage link, codes, receipts and renewal reminders.
• Payments — amount, date, M-Pesa receipt or card reference, and for cards, the brand and last four digits. Card numbers go to Paystack and never reach us.
• Activity on your card — counts of opens, QR views and saves. Not who opened it.

If you sent your details to someone's card

What you typed goes to that card's owner. We store it on their behalf and don't use it for anything else, don't sell it and don't add you to any list. To have it removed, ask the card owner, or contact us and we'll remove it.

Physical-card quotes and Teams pilot enquiries

We store the contact details, organisation, quantity, delivery town and notes you submit so our operators can respond and prepare a quote or pilot proposal. These requests are visible only to authorised administrators. They do not create a public listing or subscribe you to marketing. Contact us to request a copy, correction or removal.

Recommendations and Pro badges

An active paid member with a verified phone can recommend another profile. We store the account, profile, date and a keyed phone hash to prevent duplicate recommendations. Only the count is public; recommending does not publish your contact details. You can withdraw your recommendation from that profile, including after your plan ends. Moderators can hide abuse. Refunded payments and suspended recommenders do not contribute to the displayed count. Pro identifies a plan tier, not a verification of identity or professional ability.

One-time renewal savings

If you accept an eligible retention offer, we record the account and a keyed hash of the verified phone so the offer cannot be claimed repeatedly. Cancelling or deleting a card does not erase the payment or offer records. Accepting a saving does not charge you or change your automatic-payment consent. Contact us about access, correction or removal of these records.

What we don't do

• We don't sell or rent personal data.
• We don't run advertising trackers on cards.
• Cards are hidden from search engines.

Who else handles it

Safaricom (M-Pesa payments), Paystack (card payments), Africa's Talking (SMS) and our email provider, each only for their part. Our servers are run by our hosting provider.

How long we keep it

Your card and its contacts, for as long as your plan is active and 90 days after it ends. Payment records, for as long as tax law requires. Unpaid drafts, 24 hours.

Your rights

You can see, correct and export your data from your manage page, and delete your card and contacts from the Security tab at any time. For anything else — a copy of what we hold, or an objection — contact us and we'll answer within 30 days.