Preamble: the plain-language guarantee
Your financial data tells the full story of how you live. Jijenga exists to help you read that story clearly — not to share it, sell it, or store more of it than necessary.
Below are the rules we hold ourselves to. They are not guidelines. They are guarantees.
The four iron laws of Jijenga
No personal identity collected by default. We do not need to know who you are to do the math.
No government data sharing. Jijenga is personal analytics, not statutory reporting.
You can leave at any time. Your data should not outlive your consent.
The business model aligns with privacy. You pay. We work for you.
Article I: we don’t know who you are
Jijenga is built so that your identity is never part of the equation. We do not collect or store personal identity information.
- · We do not collect your National ID number.
- · We do not collect your KRA PIN.
- · We do not store your M-Pesa PIN.
When you upload a statement, the system extracts the numbers and the dates, but strips anything that links it to you personally. Inside Jijenga you are a callsign — nothing more.
Article II: government access & data sharing
Jijenga is a personal analytics tool. It is not a statutory reporting tool.
- · We are not a bank.
- · We are not a tax agent.
- · We have no automated data link to the Kenya Revenue Authority (KRA).
Your data, your control
Your ledger is for your eyes only. Jijenga does not share data with third parties unless you explicitly export it and send it yourself.
We do not voluntarily share data with government agencies unless compelled by a specific court order targeting a specific individual. We do not hand over data in bulk to anyone, for any reason.
Article III: your way out
You are not a captive. You are a member.
If you decide to leave Jijenga, you have the right to a complete erasure.
The button
Inside your settings, there is a “Delete account” button.
The action
Pressing it starts a permanent deletion of all your data.
The result
Your ledger, history, and credentials are permanently erased. Nothing is kept behind the scenes.
This is permanent and irreversible by design. Your data leaves when you leave.
Article IV: how Jijenga makes money
Free apps make money by selling your behaviour to advertisers and data brokers. Their business depends on knowing everything about you.
Jijenga runs on membership, not advertising.
- · You pay a membership fee.
- · That fee pays for the servers, the development, and the security.
- · Because you pay us, we have no reason to monetise your data.
We are financially incentivised to protect your privacy, not to exploit it. Our loyalty is to you, because you are the one paying.
Article V: support without exposure
Privacy is only as strong as its weakest moment. For most apps, that moment is when you need help.
The usual path — emailing support, messaging on WhatsApp, calling a helpline — forces you to identify yourself. Your name, your phone number, your account details: suddenly visible to someone on the other end.
Jijenga has a built-in messaging system. Support happens inside the app, under your callsign.
How it works
You open a thread. You describe your issue. We see your callsign, your thread, and your message. We do not see your name, email, or phone number.
Why it matters
No WhatsApp screenshots. No email trails with your real name. No phone calls where someone overhears your financial details. Your identity stays protected, even when things go wrong.
Asking for help should never cost you your privacy.
How what you bring is protected
The guarantees above are held up by engineering, not goodwill:
- · Your figures are encrypted at rest and in transit, with keys tied to your account.
- · Every read of your data is scoped to you — accounts are walled from each other at the database itself.
- · Statements you upload pass through a sealed intake that strips identity before anything is stored.
Legal appendix
Here is the formal legal text required by the Data Protection Act, 2019. It says the same things as above, in the language lawyers prefer.
- Data processor definition — Jijenga acts as a data processor for user-provided financial statements and ledger entries, under user instruction.
- Consent mechanisms — You control imports, exports, and deletion. We process only what you initiate.
- Cross-border transfers — If data is stored or processed outside Kenya, we apply contractual safeguards and encrypt it at every stage.