LEO CASH Privacy Policy

Release date:    2026-01-10

Update date:     2026-03-22

Effective Date: 2026-01-10

1) Service hotline: +254705752673 (Online hours: Monday to Saturday, 9:00-22:00).

2) Service email: leocashcustomerservice@gmail.com

 

Special Note

Dear LEO CASH platform users: LEO CASH (hereinafter referred to as "LEO CASH" or "we") has always respected and protected user privacy. Before clicking to agree to this privacy policy during the registration process, please read carefully and confirm that you have fully understood the terms and conditions of this privacy policy, especially the content in bold or/and underlined. If you have any questions about the content of this privacy policy, you can contact LEO CASH for consultation through various contact methods provided in this privacy policy. If you do not agree to any of the terms and conditions of this privacy policy, you should immediately stop the registration process.

 

This privacy policy will help you understand the following:

1. How do we collect and use your personal information

2. How do we use technologies such as cookies

3. How do we share, transfer, and publicly disclose your personal information

4. How do we protect and preserve your personal information

5. How to manage your personal information

6. Protection of personal information of minors

7. Committed to malware-free

8. Notices and revisions

9. How to contact LEO CASH

10. Others

 

1. How do we collect and use your personal information

You need to provide us with or allow us to collect and use necessary information. Before you agree to this policy, we will not store any of your information. When you view the privacy policy, the Android device system browser chrome component may trigger the acquisition of Android-ID, BSSID, SSID, Mac address, network device manufacturer, CountryIso country identification code, network information, and modification of system settings, but we will not collect the aforementioned information. To achieve the core functions of our products and services, we are authorized to collect, store, and use the following information related to you. If you do not provide relevant information, we will not be able to provide you with the corresponding products or services. These functions and information contents are as follows:

1) Assist you in completing LEO CASH platform account registration, login, and related verification process

When you register as a LEO CASH member or log in to LEO CASH client, you need to provide us with your phone number at least, and we will help you complete the registration and login verification process through SMS. After your registration application is submitted, if you need identity authentication, you need to provide your ID card number, and authorize us to query the name, gender, date of birth, home address, ID card number and other information through a third-party service agency.

When you first log in to LEO CASH lending platform using your phone number, to comply with legal requirements and ensure the security of your account, we will send you a one-time verification code to verify your identity. In order to protect your personal information and enhance your service experience, we will keep your information confidential.

2) The information collected to assist you with preliminary review when applying for a loan through LEO CASH

The company uses the APP background risk control system to make a preliminary credit reference based on your personal basic information (name, ID number, mobile phone number) provided on the loan application page.

3) The information we need you to fill in or authorize us to collect when applying for a loan

When you submit a loan application, we will collect and verify your personal information on our own or through a third-party cooperative institution (including but not limited to licensed credit bureaus, legal data service institutions and other third-party institutions that legally retain personal information) for the financial institutions to conduct preliminary review and fraud risk assessment on the applicant user.

The personal information to be collected for the application includes: user's ID number, name, nationality, gender, date of birth, contact address, common e-mail address, mobile phone number, education level, education, education, residential status, marital status, loan purpose, occupation, job nature, industry of work, personal income, years of work, two emergency contact names, mobile phone numbers, and identity relationship; Before providing emergency contact information, users need to confirm that they have obtained the consent of the emergency contact.

We will only contact the user's emergency contact person in compliance with relevant laws and regulations. For example, when users face potential fraud risks, we will provide them with the opportunity to understand the security of their funds through emergency contacts, and users can choose not to agree to authorization.

We will submit this information to a legitimate identity verification agency to verify its accuracy. These pieces of information are considered sensitive. According to Kenyan financial services regulations, if you do not provide the information required for real name authentication, you will not be able to use the products or services of LEO CASH loan platform.

 

4) Loan, repayment processing, and order management

When using LEO CASH loan services for borrowing or repayment, the company will collect and archive personal information related to your loan, including: credit contract number, disbursement amount, disbursement standard period, loan purpose, repayment method, loan card number, repayment card number, repayment date, loan annual interest rate, and personal information required by the loan product.

If you do not provide the information required for real name authentication, you will not be able to use financial products or services. Further necessary information may be required to complete the use of loan products and services. Specific information will be displayed, prompted, or authorized during the loan process. Please read carefully.

5) Provide product/service information

We will send you the latest information about our products or services, including LEO CASH loan product information, promotional information, etc., through in app messages, pop ups, SMS, email, or phone calls. If you choose not to receive such messages, you can turn off notifications or contact customer service to cancel. Closing notifications will not affect the basic functions of using LEO CASH loan platform.

6) SMS permission instructions

Data content collection: When you apply for a loan through our app, we may collect your SMS data, but only financial related SMS, including SMS content, SMS sending number, and SMS sending time.

Using data: We read, screen, and process user SMS data during anti-fraud detection and user credit risk assessment.

Anti-fraud detection: We use SMS data to detect possible fraudulent and abnormal behavior, helping to determine whether your account is in a secure state;

Credit evaluation: We will screen, process, and analyze your financial related text messages. Based on the text message data, we evaluate your credit score to determine your repayment ability and show you the appropriate amount and interest rate.

Data Security: User data is encrypted and transmitted through HTTPS and stored on our server (https://leocashpesa.com/). We will not share with any third party without the user's permission.

7) Equipment Information Permission Description

Data content collection: When you apply for a loan through our app, we may collect data related to your device.

Device identification code: such as MAC address IMEIIMSISSIDBSSIDuuid Equipment serial number, equipment model, etc.

Device hardware information: device model, manufacturer, operating system type and version, resolution, memory size, etc.

Network information: IP address, mobile operator, network type, access method, type and status, network quality data, etc.

Using data: In order to maintain the safe and stable operation of our services, prevent transaction and financial risks, provide personalized services, comply with legal and regulatory requirements, and improve our products and services.

Data Security: User data is encrypted and transmitted through HTTPS and stored on our server (https://leocashpesa.com/). We will not share with any third party without the user's permission.

8) Special instructions for collecting and using your personal information

a) If the information you provide contains personal information of other users, you need to ensure that you have obtained their consent and that they are aware of and accept this policy before providing personal information to LEO CASH lending platform.

b) If we use the information for purposes not specified in this policy, we will seek your authorization and consent again.

c) With your consent, we may also obtain your personal information from affiliated companies, partners, government agencies, and other third parties who legally hold your relevant information for purposes such as real name management, security protection, credit evaluation services, etc. Due to different product or service requirements for personal information, we will seek your consent through page prompts, interactive processes, and other means before using specific products or services.

9) Other special circumstances

You fully understand that, according to legal requirements, we do not need to obtain your authorization or consent to collect and use your personal information in the following situations:

a)   Related to national security and defense security;

b)   Related to public safety, public health, and major public interests;

c)   Related to criminal investigation, prosecution, trial, and execution of judgments;

d)   For safeguarding the significant legitimate rights and interests of personal information subjects or other individuals, such as life and property, but it is difficult to obtain your consent;

e)   The personal information collected is disclosed by you to the public on your own;

f)    Collecting personal information from legally disclosed information, such as legitimate news reports, government information disclosure, and other channels;

g)   Necessary to sign the contract according to your requirements;

h)   Necessary for maintaining the safe and stable operation of the provided products or services, such as detecting and handling product or service failures;

i)     Necessary for legitimate news reporting;

j)     Academic research institutions conduct statistical or academic research necessary for the public interest, and when providing results of academic research or descriptions to external parties, they de identify the personal information contained in the results;

k)   Other circumstances stipulated by laws and regulations.

Please be informed that according to relevant laws and regulations, if we take technical and other necessary measures to process personal information that makes it impossible for the data receiving method to re identify specific individuals and cannot be restored, or if we may conduct de identification research, statistical analysis, and prediction on the collected information to improve the content and layout of LEO CASH platform client, provide product and service support for business decision-making, and improve our products and services (including using anonymous data for machine learning or model algorithm training), then the use of such processed data does not require further notice to you and your consent.

If we cease operation, we will promptly cease the activity of collecting your personal information, notify you of the cessation of operation in the form of individual delivery or announcement, and delete or anonymize the personal information we hold.

2. How do we use cookies and similar technologies

1) The use of cookies

To ensure the normal and efficient operation of the website and provide you with a more convenient access experience, we will store small data files called cookies on your device terminal/system. Cookies will help you access your information when you visit our website in the future, simplifying the process of filling out your personal information; Protect your data security, etc.

We will not use cookies for any purposes other than those stated in this policy. You can manage or delete cookies according to your preferences. You can clear all cookies saved on your computer or mobile device, and you have the right to accept or refuse cookies.

Most browsers automatically accept cookies, but you can usually modify your browser settings to refuse cookies according to your own needs; Additionally, you can also clear all cookies saved within the software. But you may not be able to fully experience some of our convenient and secure service features as a result.

2) The use of network beacons and similar technologies

In addition to cookies, our website often contains electronic images (known as "single pixel" GIF files or "network beacons") and other similar technologies that can help the website calculate the number of users browsing the webpage or accessing certain cookies.

We use network beacons in the following ways:

a)   We use network beacons on our website to calculate the number of user visits and identify registered users through access cookies;

b)   We can provide more convenient services on our website through the cookie information we obtain.

3. How do we share, transfer, and publicly disclose your personal information

1) Sharing

We will not share your personal information with companies, organizations, or individuals outside of us, except in the following circumstances:

a)   Sharing with explicit consent: With your explicit consent, we will share your personal information with other parties;

b)   Sharing under legal circumstances: We may share your personal information with external parties in accordance with laws and regulations, litigation dispute resolution needs, or as required by administrative or judicial authorities in accordance with the law;

c)   Sharing with service providers: Some specific modules or features in our functionality are provided by external suppliers, and we will share your information with the suppliers according to the specific situation.

d)   Sharing with affiliated companies: In order for us to jointly provide services to you based on affiliated accounts or unified member accounts, identify abnormal status of member accounts, and protect the personal and property safety of LEO CASH platform and affiliated companies or other users or the public from infringement, your personal information may be shared with our affiliated companies; 

e)   Shared with authorized partners: We may entrust authorized partners to provide you with certain services or perform functions on our behalf. We will only share your information for legal, legitimate, necessary, specific, and clear purposes. Authorized partners can only access the information they need to perform their duties and cannot use this information for any other purpose;

f)    When your relevant personal information has already been disclosed to the public on its own, or has been disclosed to the public through legal and public channels (including news reports, government information disclosure channels, etc.);

2) Transfer:

We will not transfer your personal information to any company, organization, or individual, except in the following circumstances:

a)   Obtain your explicit consent in advance.

b)   In the event of a merger, acquisition, asset sale, restructuring, or bankruptcy liquidation involving the transfer of personal information, we will require the new company or organization holding your personal information to continue to be bound by this policy. Otherwise, we will require the company, organization, and individual to seek authorization and consent from you again.

3) Public disclosure

We will only publicly disclose your personal information in the following situations

a)   After obtaining your explicit consent;

b)   If we determine that you have violated laws and regulations or seriously violated our relevant agreement rules, or to protect the personal and property safety of our affiliated company users or the public from infringement, we may disclose personal information about you in accordance with laws and regulations or with your consent, including your relevant violations and the measures we have taken against you;

c)   In order to protect your or others' significant legitimate rights and interests such as life and property, but it is difficult to obtain your prior consent;

d)   Legal Disclosure: We may publicly disclose your personal information in the event of legal, procedural, litigation, or mandatory requirements from government authorities.

e)   The third-party access agency cooperating with the company collects your personal information: Some of the services on LEO CASH platform need to be provided by external third parties. Therefore, LEO CASH platform app will embed third-party SDKs. During your use of LEO CASH platform services, we authorize the third-party company to participate in and collect and use some of your personal information.

4) Exceptions to obtaining prior authorization and consent for sharing, transferring, or publicly disclosing personal information

In the following situations, sharing, transferring, or publicly disclosing your personal information does not require your prior authorization and consent

a)   Related to national security and defense security.

b)   Related to public safety, public health, and major public interests;

c)   Related to criminal investigation, prosecution, trial, and execution of judgments;

d)   For the purpose of safeguarding your or other individuals' significant legitimate rights and interests such as life and property, but it is difficult to obtain my consent;

e)   Personal information that you disclose to the public on your own;

f)    If personal information is collected from legally publicly disclosed information, such as lawful external sharing, transfer, and public disclosure activities that do not belong to personal information, there will be no need to notify you separately and obtain your consent for the storage and processing of such data;

g)   Please be informed that according to the current effective legal provisions, if we take technical and other necessary measures to process personal information, which makes it impossible for the data recipient to re identify a specific individual and cannot be restored, the sharing, transfer, and public disclosure of such processed data do not require further notice to you and your consent.

4. How do we protect and store your personal information

1) Encryption storage protection

We comply with the encryption storage protection requirements for sensitive personal information, and on the basis of encrypting the database, we encrypt and store both your personal basic information and sensitive personal information. Prevent unauthorized access, public disclosure, use, modification, damage or loss of personal information.

2) Database classification and hierarchical access permission management system

A data security management system centered around the data lifecycle, which enhances the security of the entire system from multiple dimensions such as organizational construction, system design, personnel management, and product technology. At present, our important information systems have passed the Level 3 certification for network security protection.

We will use encryption technology to enhance the security of personal information; We will use trusted protection mechanisms to prevent personal information from being maliciously attacked.

We have established access control mechanisms for databases and systems to ensure that only authorized personnel can access personal information.

We strictly limit the permissions for copying and exporting data, and have set operational permissions for the copying and exporting of personal information stored in the database and displayed in the backend system.

We have conducted training courses on personal information protection and data security prevention for all employees in accordance with relevant laws and regulations in Kenya, to enhance their awareness of the importance of protecting personal information.

3) Minimum storage time

We will only retain your personal information for the period necessary to achieve the purposes stated in this policy, unless we have obtained your consent to extend the retention period or are required by law to do so.

You understand that when actively collecting your personal information, it is inevitable to collect information or data with low relevance to the service content. We will delete non essential personal information or data within 3 days after the data collection is completed, and only save necessary information.

4) Security incidents and emergency management

The Internet is not an absolutely secure environment, and we strongly recommend that you do not send your information using a communication method other than the one recommended by us. If you find that your personal information, especially your account or password, has been leaked, please contact LEO CASH platform customer service immediately so that we can take corresponding measures according to your application.

Please note that the information you voluntarily share or even publicly share when using our services may involve your or others' personal information or even sensitive personal information, such as uploading images containing personal information when evaluating. Please consider more carefully whether to share or even publicly share relevant information when using our services.

Please assist us in ensuring the security of your account. We will do our best to ensure the security of any information you send to us. If our physical, technological, or management protective facilities are damaged, resulting in unauthorized access, public disclosure, alteration, or destruction of information, which damages your legitimate rights and interests, we will bear corresponding legal responsibilities.

After an unfortunate personal information security incident occurs, we will inform you of the basic situation and possible impact of the security incident, the disposal measures we have taken or will take, suggestions for you to independently prevent and reduce risks, and remedial measures for you in accordance with legal requirements. We will inform you of the relevant situation of the event through email, phone, push notifications, etc. If it is difficult to inform individual information subjects one by one, we will take reasonable and effective measures to publish announcements.

At the same time, we will also report the handling of personal information security incidents in accordance with regulatory requirements.

5. How to manage your personal information

According to current laws, regulations, and national and regional practices, we guarantee your right to access, correct, supplement, delete, and change the scope of authorization for your personal information, as follows:

1) Accessing and correcting your personal information

Unless otherwise provided by laws and regulations, we will strive to ensure smooth access to your personal information whenever you use our services. You can enter LEO CASH platform and view and correct your personal information and related details on the "My" page. For example, account information: You can view and correct your account information through "My Settings User Protection Center".

When you need to update your personal information or discover errors in our processing of your personal information, you have the right to make corrections or updates. You can submit your correction request to us through online customer service or by calling customer service to provide feedback on errors. Before you make any updates or corrections, we may first require you to verify your identity before processing your request.

2) Delete your personal information

In addition to the circumstances described in Article 1, you may also contact us to request the deletion of personal information in the following situations:

a)   If our handling of personal information violates laws and regulations.

b)   If we collect and use your personal information without your consent.

c)   If our handling of personal information violates our agreement with you.

d)   If you no longer use our products or services, or if you cancel your account.

e)   If we no longer provide you with products or services.

If we decide to respond to your deletion request, we will also notify the subject who obtained your personal information from us as much as possible and request them to delete it in a timely manner. Unless otherwise provided by laws and regulations, or if these entities have obtained your independent/separate authorization, you need to make a separate request to that entity.

You confirm that you are aware that when you delete relevant information, due to legal and security technology reasons, we may not be able to immediately delete the corresponding information from the backup system. We will securely store your personal information and further process and isolate it until the backup system can delete or anonymize such information.

3) Change the scope of your authorized consent and cancel the account

a)   You can revoke some authorizations by modifying personal information, disabling certain functions, or canceling your account. When you withdraw your consent or authorization, we will no longer be able to provide you with the services corresponding to the withdrawal of consent or authorization, and we will no longer process your corresponding personal information. But your decision to withdraw your consent or authorization will not affect the personal information processing previously carried out based on your consent or authorization.

b)   You can cancel your registered LEO CASH platform account at any time. You can do it yourself through "My Settings User Protection Center Cancel Account" or contact customer service to cancel your account. The things you should pay attention to and the conditions you should meet are as follows:

  1. There are no unfinished orders in the account;
  2. The account has no records of theft, closure risks, or restrictions, and there have been no sensitive operations such as changing registered phone numbers or passwords in the past month;
  3. There are no unresolved reports, complaints, or lawsuits related to this account;
  4. The account has been unlinked from other websites, programs, and apps.

After canceling your account, we will cease to provide you with products or services and, at your request, delete or anonymize your information, including virtual benefits such as coupons, paid members, account balances, etc. Any content and information will be irretrievable, except as otherwise provided by laws and regulations.

After your personal information exceeds the retention period (6 months), we will delete your personal information or anonymize it according to legal requirements.

4) Obtain a copy of personal information

You have the right to obtain a copy of your personal information. Subject to compliance with laws, regulations, and regulatory requirements, you may contact the customer service indicated in this policy for processing.

5) In response to your above request

To ensure security, we may first require you to submit relevant information to verify your identity before processing your request.

We will provide a response within 7 working days. If you are not satisfied, you can also contact us through the contact information reserved by our company for feedback.

For your reasonable requests, we generally do not charge any fees, but for requests that are repeated multiple times or exceed reasonable limits, we will charge a certain cost fee depending on the situation. We may refuse requests that are not directly related to your identity, are unnecessarily repetitive, require excessive technical means (such as developing new systems or fundamentally changing current practices), pose risks to the legitimate rights and interests of others, or are unrealistic.

In the following situations, as required by laws and regulations, we will not be able to respond to your request:

a)   Related to national security and defense security;

b)   Directly related to public safety, public health, and major public interests;

c)   Directly related to criminal investigation, prosecution, trial, and execution of judgments;

d)   There is sufficient evidence to indicate that the personal information subject has subjective malice or abuse of rights;

e)   For safeguarding the significant legitimate rights and interests of personal information subjects or other individuals, such as life and property, but it is difficult to obtain their consent;

f)    Responding to your request will result in serious harm to your or other individuals' or organizations' legitimate rights and interests;

g)   Involving trade secrets;

h)   And other circumstances stipulated by laws and regulations.

6. Protection of personal information of minors

We consider natural persons under the age of 18 as minors. Our products and services are only aimed at adults, and we do not actively collect or process information from minors under the age of 18. If you are a minor under the age of 18, please immediately stop using LEO CASH's products and services

7. Committed to being malware free

We attach great importance to user privacy and personal data security, and we assure you that our app is not malicious software.

Our app will not engage in the following activities:

a)   Collect or store any personal data without the explicit consent of the user;

b)   Sell, rent, or share users' personal data to any unauthorized third party without their consent;

c)   Perform any malicious activities, such as stealing data, damaging devices, malicious advertising, and other malicious behaviors.

8. Notification and Revision

1) In order to provide you with better service, or with the development of LEO CASH platform business, or with the continuous improvement of LEO CASH platform's privacy policy, this privacy policy will be updated accordingly. LEO CASH platform will release updated privacy policies, and please visit LEO CASH platform in a timely manner to learn about the latest privacy policy content. Without your explicit consent, we will not reduce the rights you are entitled to under this privacy policy.

2) For significant changes, LEO CASH platform will inform you of any changes to the privacy policy content through various means, including but not limited to announcements, text messages, pop ups, or special prompts on browsing pages, and will publish updated privacy policies through LEO CASH platform.

The significant changes referred to in this privacy policy include but are not limited to:

a)   Significant changes in the service model of LEO CASH platform. Such as the purpose of processing personal information, the types of personal information processed, and the ways in which personal information is used;

b)   LEO CASH platform has undergone significant changes in ownership structure, organizational structure, and other aspects. Changes in ownership caused by business adjustments, bankruptcy mergers and acquisitions, etc;

c)   The main recipients of personal information sharing, transfer, or public disclosure have undergone significant changes;

d)   There has been a significant change in your right to participate in personal information processing and the way you exercise it;

e)   When there are changes in the responsible department, contact information, and complaint channels for handling personal information security on LEO CASH platform;

f)    When the personal information security impact assessment report indicates the presence of high risks.

3) If you do not agree with the modifications made by LEO CASH platform to this privacy policy, you should stop using the services provided by LEO CASH platform; If you continue to use the service or do not voluntarily terminate the service, it will be deemed that you agree to the revised privacy policy.

9. How to contact LEO CASH

If you have any questions, opinions, suggestions, complaints, or reports regarding this privacy policy or your personal information, you can contact LEO CASH platform through the following methods:

1) Service hotline:+254705752673 (online hours: Monday to Saturday 9:00-17:00). 

2) Service email: leocashcustomerservice@gmail.com

3) LEO CASH registered address: Tetezi Towers George Padmore Road Kilimani Nairobi, Nairobi Kenya

LEO CASH platform will verify the issues involved as soon as possible. Generally, LEO CASH platform will respond within 24 hours

10. Other

If there is a conflict between the content of this privacy policy and the privacy protection provisions agreed upon in other agreements signed between the user and LEO CASH, the provisions of this privacy policy shall prevail; The content not specified in this privacy policy shall be subject to the provisions of other agreements signed between the user and LEO CASH. In case of any conflict between certain provisions of this privacy policy and legal regulations or regulatory requirements related to personal information, the relevant legal regulations or regulatory requirements shall prevail.