Privacy Notice

NjangiMe is operated by Githaf Consulting ("we", "us"). We are the data controller for the account and circle data you provide to us. You can reach our privacy contact at info@njangime.com.

We do not hold or move your money. Contributions are paid through regulated payment providers and bank information is read-only. NjangiMe records what happened so your circle stays in sync.

• Contract — running your account, circles, contribution tracking and subscription billing.
• Consent — connecting a bank account through Open Banking, optional marketing email, and non-essential cookies. You can withdraw consent at any time.
• Legitimate interests — keeping the platform secure, preventing abuse, and producing the late-payment and risk signals circle admins rely on.
• Legal obligation — keeping billing and tax records for the period the law requires.

• Members of a circle you join can see your name, contribution status, picking position and the circle's shared transaction feed.
• Circle admins can additionally see your invitation status and your contribution record for their circle.
• Our service providers process data on our instructions only — see the subprocessors page.
• We do not sell your personal data and we do not use it to train third-party AI models.

Identity documents are stored in private storage and are never exposed on a public URL. Circle members other than admins never see your documents, address or phone number.

Our retention schedule:

• Access — download a copy of your data from Settings, or ask us.
• Rectification — correct your details in Settings at any time.
• Erasure — delete your account and personal data from Settings → Your data, or email us.
• Restriction and objection — ask us to pause a specific use of your data.
• Portability — your export is machine-readable JSON.
• Withdraw consent — remove uploaded documents or disconnect a bank account at any time.

Use Settings → Your data for self-service export and deletion. We respond to emailed requests within one month. If you are unhappy with our response you can complain to your national data protection authority — in the UK that is the Information Commissioner's Office.

NjangiMe uses AI in exactly one place: the NjangiMe Assistant chatbot. It is clearly labelled as AI in the chat window, as required by Article 50 of the EU AI Act. It answers questions about how the product works only — it has no access to your profile, your circle, your contributions or your bank data, and its answers can be imperfect, so please verify anything important in the app.

• What is sent to the AI provider: only the text of your chat messages and our product documentation. Please do not type personal or payment details into the chat.
• The provider processes messages on our instructions to generate a reply and does not use them to train models.
• Chat messages are not stored against your account and are not used to profile you.
• Risk scores shown to circle admins are produced by fixed, published rules (missed and late contributions) — not by AI, and never automatically. No decision about you is made solely by automated means within the meaning of Article 22 UK/EU GDPR; a circle admin always decides, and you can ask us to review any score.

Our infrastructure and service providers may process data outside your country. Where data leaves the UK or EEA, we rely on adequacy decisions, the UK International Data Transfer Addendum, or EU standard contractual clauses with the provider, together with a transfer risk assessment.

Githaf Consulting is established in the United Kingdom and is the controller under both the UK GDPR and, for our EU users, Regulation (EU) 2016/679. UK users may complain to the Information Commissioner's Office; EU users may complain to their national supervisory authority. To reach our data protection contact, or to request our Record of Processing or a data processing agreement, email info@njangime.com.

Because we are established outside the EU but offer NjangiMe to members living in the EU, we are required to appoint a representative in the Union under Article 27 EU GDPR. That appointment is in progress and the representative's name and contact address will be published in this section, and notified to account holders, as soon as it is in place.

Until then, EU members can exercise every right in this notice directly with us at info@njangime.com, and may also complain to their national supervisory authority. Appointing a representative does not change who is responsible: Githaf Consulting remains the controller and stays fully accountable for the processing described here.

We will update this page when our processing changes and will email account holders about material changes. Questions? Write to info@njangime.com.