Last Revised: May 10, 2025
Solution Savings and Credit Co-operative Society Limited (“Solution Sacco”, “we”, “us”, or “our”) is a trusted, licensed deposit-taking SACCO, that has been serving members since 1976. We were officially registered in 1993 under the Co-operative Societies Act, Cap 490 as Sacco Society No. CS/6825 with the Ministry of Co-operatives and MSMEs Development, and we’re also registered with the Office of the Data Protection Commissioner (ODPC). Regulated by the Sacco Societies Regulatory Authority (SASRA), we offer a wide range of financial services designed to support our members’ financial well-being. To learn more about who we are and the services we offer, feel free to visit our website at https://www.solutionsacco.com.
As a responsible financial institution, we are fully committed to safeguarding the personal and sensitive data of our members. We recognize the importance of privacy and data protection, and we handle all information collected with the highest level of care, integrity, and in compliance with applicable laws and standards.
This Privacy Policy governs the use of the Solution Sacco Mobile Banking Application (the “Service”), which is developed, maintained by Binary Limited on behalf of Solution Sacco and intended for use as-is. The policy outlines how we collect, use, share, store, and protect your personal data when you interact with our Mobile Banking Platform.
By accessing or using the Service, you acknowledge that you have read, understood, and accepted the terms of this Privacy Policy, along with any applicable laws and regulations. You also consent to the collection and processing of your data as described herein
Should you disagree with any aspect or terms of this Privacy Policy, we respectfully ask/advise that you discontinue use of our Service immediately. For any privacy-related inquiries, please contact us (refer to Section 12).
- Legal Frameworks
This Privacy Policy complies with:
- The Google Play Developer Program Policy and Data Safety Guidelines.
- The Apple App Store’s User Privacy and Data Use Guidelines
- The Kenya Data Protection Act (DPA), 2019.
- The European Union General Data Protection Regulation (GDPR).
- Information We Collect
We may collect and process the following categories of data:
2.1 Personal Data
We collect the following types of personally identifiable information to provide and improve our Service:
- Customer/Account Information: Name, Date of Birth, phone number, email address, member ID, National ID /Passport No., and other registration details.
- Financial Data: Transaction history, account balances, loan and savings details, payment records, and mobile money payments.
- Contact Information: Collected with your consent for account management and customer support.
- KYC information: as per regulatory requirement.
- Device & Technical Data:
- IP address, device model, unique device identifiers, OS version, and app version.
- Mobile network information and language settings.
- Log data related to usage patterns (e.g., error reports, crash reports, session duration, in-app actions).
- Tracking data via cookies or similar technologies (see Section 5).
2.2 Sensitive Data
We may process sensitive user data such as:
- Biometric data (e.g., fingerprints for authentication, if used).
- Government-issued IDs (e.g., national ID for KYC compliance).
- Financial records (e.g., credit history, account transactions).
We only process sensitive data where:
- It is strictly necessary,
- You have provided explicit consent, and
- We have implemented robust safeguards such as encryption and access controls.
We ensure that all sensitive data is processed and stored securely, only for the clearly defined and lawful purposes, and in compliance with the applicable laws.
2.3 Data from Third-Party Services
This Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us, and therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services
The app integrates with third-party services (e.g., Google Play Services, Apple App Store, payment gateways) which may collect data under their policies. Users are encouraged to review their policies:
- Legal Basis for Processing
We process personal and sensitive data based on the following grounds:
- Contractual necessity: To provide the Service (e.g., processing transactions, account management).
- Legal obligation: To comply with laws, such as anti-money laundering regulations.
- Consent: For optional uses (e.g., non-essential data processing, marketing, biometric authentication). Users may withdraw consent any time.
- Legitimate interest: To prevent fraud, enhance security, and improve service performance.
- How We Use Your Data
Your data may be used for the following purposes:
- To provide and maintain the Service.
- To verify your identity and process transactions, loans, and account activities.
- To detect and prevent fraud or unauthorized use.
- To monitor and improve app functionality, user experience, and security.
- To provide member/customer support.
- To send non-promotional service alerts (e.g., transaction notifications).
- To notify you about changes to our Service,
- To provide you with general information, special offers about other services and events which we offer that are similar to those that you have already consumed or enquired about, unless you have opted not to receive such information.
- To comply with legal and regulatory reporting requirements.
- Cookies & Tracking Technologies
- We may use cookies and similar technologies provided by third parties for analytics, security, and to improve functionality.
- Users may manage their preferences via device or browser settings. Note that disabling cookies may impact the app’s functionality.
- Third-party services (e.g., analytics providers) may also set cookies to collect information and improve their services.
- Data Sharing & Disclosure
We do not sell your personal data to third parties. Any sharing of your information follows strict legal and regulatory requirements, and occurs only when necessary for service provision or legal compliance.
We may share/disclose your data in good faith and belief that such an action is necessary under the following circumstances:
- With service providers: Such as payment processors, IT vendors, and support partners — under strict confidentiality agreements and data protection obligations.
- With regulators or legal authorities: When required by Kenyan or international law (e.g., Sacco Societies Regulatory Authority (SASRA), Central Bank of Kenya, Judicial authorities under court orders, or Law enforcement agencies with proper legal requests).
- For Security and Protection Purposes: When it’s necessary to;
- Prevent or investigate fraud, abuse, illegal activities, or possible wrongdoing in connection with the service.
- Protect user safety or public interest.
- Defend against legal claims
- Safeguard Solution Sacco’s rights and property
- For business transfers/continuity: In the event of a merger, acquisition, or restructuring — users will be notified and data protection terms will remain in force.
If your data is transferred outside Kenya, we ensure adequate safeguards such as:
- Standard Contractual Clauses (SCCs).
- Data processing agreements compliant with GDPR and the Kenya DPA.
- Encryption and additional security measures.
- Due diligence on all foreign recipients.
All disclosures follow the principle of data minimization – we only share what is necessary for the specified purpose.
- Data Security
We apply appropriate technical and organizational measures to safeguard your data, including:
- Encryption (in transit and at rest).
- Access controls (role-based access, authentication).
- Regular audits and risk assessments.
While we strive for full security, no system is entirely immune to breaches; as such, we cannot guarantee absolute security. Users are encouraged to protect their login credentials, use secure passwords, and report suspicious activity promptly.
- Data Retention
We retain your personal data only as long as necessary:
- To deliver the Service and maintain your account.
- For the purpose for which it was collected.
- To comply with legal and regulatory obligations (e.g., 7 years for financial data as per the Kenyan law).
- To enforce our legal agreements and policies.
- Until a user requests data deletion, subject to applicable legal requirements.
- User Data Rights
As a Data Subject under GDPR and the Kenya Data Protection Act, you have the right to:
- Be informed of the use of your data.
- Access your personal data.
- Correction of inaccurate or incomplete data.
- Request erasure or deletion (“right to be forgotten”).
- Restrict or object to the processing of your personal data in certain cases.
- Withdraw consent at any time (where processing is based on consent).
- Request data portability in a structured, machine-readable format.
To exercise these rights, please contact us via our Data Protection Officer at:
Physical Address: 1st Floor, Mwalimu Plaza, Gakoromone Road, Meru, Kenya
Postal Address: P.O. Box 1694-60200 Meru, Kenya
Email: info@solutionsacco.com
Phone: +254 728 787 972
We will respond to your request within the timeframe required by law. Please note that we may ask you to verify your identity and provide signed instructions before responding to your requests.
- Children’s Privacy
This Service is not intended for users under the age of 18. We do not knowingly collect or process data from minors. In the event we discover that a minor has provided us with personal information, we immediately delete the data. If you are a parent or guardian and you’re aware that your child has provided us with personal information, please contact us so that we can take the necessary actions.
- Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Updates will be posted on our website and or in-app. You will be notified of material changes where appropriate via:
- In-app notifications.
- Email (if applicable).
- Updated “Last Revised” date at the beginning of this policy document.
You are advised to review this policy periodically.
- Contact Us
For inquiries, complaints, or concerns regarding this policy, or in the event you would like to exercise any of your rights under this policy, you can contact us at:
Solution Savings and Credit Cooperative Society Ltd
📍 1st Floor, Mwalimu Plaza, Gakoromone Road, Meru, Kenya
P.O. Box 1694-60200 Meru, Kenya
https://www.solutionsacco.com
📧 info@solutionsacco.com
📞 +254 728 787 972 / +254 734 321 924