Privacy Policy

This policy explains what personal data Ponti (“we”, “us”) collects, why, and your rights over it. We handle personal data in line with Kenya's Data Protection Act, 2019.

1. What we collect

• Account: your name, email address, and profile photo from Google sign-in.
• Creator profile: social handle(s) and platform, niches, follower count, rate, and your M-Pesa/payout number.
• Brand profile: company name, category, and campaign details you enter.
• Submissions: the content, captions, links and any video you submit for a campaign.
• Transactions: campaign funding, escrow, and payout records.
• Technical: basic log and device data needed to run and secure the service.

2. How we use it

• To match creators with campaigns and run the verification flow.
• To hold funds in escrow and pay creators.
• To compute your Trust Score from real, verified delivery.
• To keep the platform safe (fraud, bot and abuse prevention).
• To contact you about your account and campaigns.

3. Legal basis

We process your data to provide the service you signed up for (performance of a contract), to meet legal obligations, for our legitimate interest in running a safe platform, and — where required — with your consent.

4. Who we share it with

We do not sell your personal data. We share only what is necessary with service providers who process data on our behalf:

• Payment provider (licensed) — to collect campaign funds and pay creators.
• Cloud infrastructure — Google Cloud, Firebase, and our database host, to run and secure the app.
• AI verification — the brief and submission text/media are sent to our AI provider(s) solely to assess the work.
• Authorities, where we are legally required to.

5. Storage, security and location

Data is encrypted in transit and protected by access controls. Our application and database are hosted in the European Union (Google Cloud and our database region), so your data may be processed outside Kenya under appropriate safeguards. We keep data only as long as needed to provide the service and meet legal and financial record-keeping obligations, then delete or anonymise it.

6. Your rights

Under the Data Protection Act you may access, correct, delete, or object to the processing of your personal data, and request a copy of it. You can edit much of your profile in-app; for anything else, contact us and we will respond within a reasonable time.

7. Children

Ponti is not intended for anyone under 18, and we do not knowingly collect their data.

8. Changes

We may update this policy; material changes will be notified in-app or by email.

9. Contact & data requests

To exercise your rights or ask a privacy question, email ponti101dev@gmail.com or see our Contact page.