Privacy Policy

Effective Date: 30 November 2025

Last Updated: 31 December 2025

Your Privacy and Trust Matter to Us

At BillBuddys, we are committed to protecting your personal information, promoting responsible digital use, and maintaining transparency in how we collect, use, and share your data.

This combined Platform & Privacy Policy outlines your rights and responsibilities as a user, as well as our obligations as a service provider under the Kenya Data Protection Act, 2019 and applicable international standards, including the General Data Protection Regulation (GDPR).

Definitions

NBT Technologies Ltd: the Service Provider for BillBuddys. Also referred to as "NBT", "We", "Us", or "Our".

You ("Your"):

• Refers to any individual who accesses, uses, or interacts with our products, services, website, or mobile applications.
• Any partner or supplier or vendor that is in a contract with us

Platform ("the platform"): this is the technology infrastructure that powers or enables BillBuddys service.

OTP ("OTP code"): this is a one time code that is sent to your mobile number for purposes of verification. Its validity is time-bound and it must be used within the specified validity.

Service: BillBuddys Application, Website, and related services including but not limited to customer support services.

Buddytag: this is your BillBuddys account alias.

PIN ("Personal Identification Number"): this is your secret identification and authorization code.

OAuth 2.0: refers to an industry-standard method that lets you sign in or share limited account information securely between services, without exposing your password or PIN.

Quick Overview

• We don't sell your data— Your information is never sold to third parties.
• Enterprise-grade security— Encrypted data and secure authentication.
• Your data stays yours always— You own and control your data
• Minimal data collection – We only collect what's necessary to provide the Service.

Purpose and Scope

This Policy establishes:

• How you are expected to engage responsibly on the BillBuddys platform; and
• How we collect, use, store, and protect your personal data.

It applies to:

• All users of our Website, Mobile Application and related services.
• Third-party partners, vendors, and affiliates working with us under a contract.
• Our employees who handle or process your data.

By using our Services, you consent to the practices described here. If you do not agree, please discontinue use of the Service.

Information We Collect

We collect only the data necessary to operate and improve our services, including:

Personal Information: Full Name, Email Address or Apple ID, Mobile Number, Date of Birth, Gender, Username, and Profile Picture.

Bill and Transaction Data: These are transaction information when you use our Services: Bill names, Bill Category, Bill Amount, and Contributors' information like their full names, mobile number, buddytag, and their share of contribution amounts.

We also collect Payment details for example Amounts, recipients of bill settlements, Transaction Receipts Numbers, Timestamp, and Payment Methods.

Device Information and Service Usage: Device Type, IP Address, Geolocation information, Operating System, Mobile Application and Website Usage Data, Service Reviews, and Crash Reports

Communications: such as Support Requests, and Application Preferences

How We Use Your Information

We use your information to offer you the Service for example but not limited to:

• Create and manage user accounts
• Facilitate bill creation, payment requests, and settlements
• Send verification codes and payment updates

Communication: We can send you;

• Payment notifications, Reminders, and Support Responses
• Announce product updates or policy changes
• Helpful tips, offers, and feature updates
• Notifications related to your account and security

Security & Fraud Prevention: We may use your information to;

• Verify your identity, Prevent Fraud and Monitor suspicious activities
• Enforce our Terms of Service

Analytics & Improvement: We may use your data to;

• Analyse usage to improve performance and enhance your experience with our Service.
• Support development of new features

Legal & Compliance: We may use the information we have about you to;

• Fulfil regulatory obligations
• Respond to lawful requests or court orders

How We Share Your Information

In order to offer you with the Service, we will share your information with other users or entities as defined below:

With other users: Bill participants ("contributors") in your shared bill may view limited information about you for example (Name, Buddytag, Profile picture, and your contribution details (amount and payment status). With Third Parties entities (under Contract): OAuth providers (Google, and Apple) for login authentication and authorization, Payment Processors (Safaricom for M-PESA), Notification (SMS/Email/WhatsApp) Service Providers. Cloud Service and Infrastructure Hosting.

All partners are contractually bound to protect your data.

Legal Authorities: We are bound to share your data when required by law, to prevent fraud, or protect legitimate public interest.

Business Transfers: In case of a merger or acquisition, user data may be transferred under the same privacy protections.

We never sell your data to advertisers or third parties.

Data Retention

We shall retain your data as per the requirements of the law.

You can request deletion of your data by sending your request to support@billbuddys.com, but certain records may be retained as required by law.

Data Security

We employ industry-grade protection measures like: Data encryption (HTTPS/TLS, AES), Secure authentication and identity verification (OAuth 2.0, OTP), Access controls and security audits.

We do not capture, process, or store your mobile wallet PIN or financial credentials. Your PIN shall be securely authenticated against your mobile financial service provider.

While we take strong measures to protect and safeguard your data and personal information, you are responsible for keeping your login or access credentials confidential.

Your Rights and Choices

Under data protection laws, you have the right to:

• Access your data
• Correct inaccuracies
• Delete your account (subject to legal retention)
• Object to certain processing activities
• Request data portability
• Withdraw consent at any time

To exercise these rights, contact: support@billbuddys.com. We'll respond within 30 days.

Acceptable Use of the Service

You agree not to:

• Use the Service for illegal or fraudulent purposes
• Impersonate others or misrepresent your identity
• Upload harmful content or malware
• Attempt to breach or exploit system vulnerabilities
• Engage in money laundering, illegal or unauthorized financial activities

Violations may result in account suspension, investigation, or legal action or all of these consequences.

Cookies and Tracking

Our website uses cookies to maintain sessions and analyze traffic. The mobile app uses device analytics instead of cookies. You may disable cookies in your browser settings (may affect performance).

Children's Privacy

BillBuddys is designed for use by individuals who are 18 years of age or older. We do not intentionally gather any personal information from minors. Should you become aware that this has happened, please inform us immediately through our provided support contacts so we can take appropriate corrective measures.

International Data Transfers

Data may be processed in or outside Kenya. We ensure adequate protection via contractual data protection clauses and GDPR-aligned safeguards.

Intellectual Property

All platform and product designs, trademarks, and software code belong to NBT Technologies Ltd. You may not copy, modify, or redistribute without written consent from us.

Compliance and Enforcement

We are committed to transparency and strict adherence to Anti-Money Laundering (AML) and Know Your Customer (KYC) standards. All users are required to comply with all applicable financial and data protection laws. Failure to comply or breaches of these laws may lead to NBT Technologies taking necessary action, including but not limited to reporting the violation to the relevant authorities or permanent suspension of the user's account.

Changes to This Policy

We may update this Policy periodically. You'll be notified via our mobile application, website or email of any significant changes. Continued use of our Services after updates implies acceptance.

Contact Information

• Email: support@billbuddys.com
• Website: https://billbuddys.com

We aim to respond to all inquiries within 30 days.

BillBuddys – Simplifying Bill Splitting, Respecting Privacy.