Moolyka Privacy Policy

Last Updated: January 15, 2026

Transparency Note: As a platform built on trust, we're committed to protecting your privacy while enabling impactful donations.

1. Introduction

Tideflash ("we," "our," or "us") operates the Moolyka platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using Moolyka, you consent to the data practices described in this policy. If you do not agree, please do not access or use our services.

2. Information We Collect

2.1 Information You Provide

Account Information:

  • Full name
  • Email address
  • Phone number (for M-Pesa users)
  • Organization details (for beneficiaries/suppliers)
  • Profile photo (optional)

Donation Information:

  • Payment details (processed via secure gateways)
  • Donation amounts and dates
  • Selected items and quantities
  • Delivery preferences

Project/Product Information:

  • Project descriptions and photos
  • Product listings and specifications
  • Location data
  • Impact reports and updates
2.2 Automatically Collected Information
  • IP address and device information
  • Browser type and version
  • Pages visited and time spent
  • Referral URLs
  • Cookies and similar technologies
2.3 Information from Third Parties
  • Payment processors (M-Pesa, Stripe, crypto exchanges)
  • Verification services for projects
  • Social media platforms (if you connect accounts)

3. How We Use Your Information

We use collected information to:

  • Provide Services: Process donations, manage accounts, facilitate deliveries
  • Communication: Send transaction confirmations, impact reports, platform updates
  • Verification: Authenticate users, verify projects and suppliers
  • Improvement: Enhance platform features and user experience
  • Transparency: Generate public donation reports (anonymized where appropriate)
  • Security: Detect and prevent fraud, unauthorized access
  • Legal Compliance: Meet regulatory requirements
3.1 Donation History & Reporting

Registered users can access:

  • Complete donation transaction history
  • Order status and delivery tracking
  • Downloadable receipts and tax documents
  • Impact metrics from supported projects

This data is stored securely and accessible only to you through your account.

4. Information Sharing & Disclosure

4.1 When We Share

We may share information:

  • With Suppliers: Necessary details to fulfill your donations (name, delivery address, item specifics)
  • With Beneficiaries: Information about donated items being delivered
  • With Service Providers: Payment processors, hosting services, analytics providers
  • For Legal Reasons: To comply with laws, regulations, or legal requests
  • For Protection: To protect rights, property, or safety of users/public
  • With Consent: When you explicitly authorize sharing
4.2 Blockchain Transparency

Certain transaction data is recorded on Ethereum blockchain for transparency:

  • Donation amounts (in crypto or converted value)
  • Timestamp of transactions
  • Delivery confirmation hashes
  • Wallet addresses (for crypto donations only)

Personal identification information is NOT stored on blockchain.

5. Analytics & Tracking

5.1 Google Analytics

We use Google Analytics to understand platform usage:

  • Tracks: Page views, session duration, user demographics
  • Purpose: Improve user experience, optimize features
  • Data: Anonymized and aggregated
  • Opt-out: Available through Google Analytics opt-out browser add-on
5.2 Cookies & Similar Technologies

We use:

  • Essential Cookies: Required for platform functionality
  • Preference Cookies: Remember your settings
  • Analytics Cookies: Help us improve the platform
  • Marketing Cookies: Show relevant impact stories

You can control cookies through your browser settings.

5.3 Do Not Track Signals

We currently do not respond to Do Not Track signals as there's no standard for how to respond.

6. Data Security

We implement security measures including:

  • Encryption of sensitive data (AES-256)
  • Secure socket layer (SSL) technology
  • Regular security audits
  • Access controls and authentication
  • Secure payment processing via SMPLY Pay

While we strive to protect your information, no method of transmission over the internet is 100% secure.

7. Your Rights

Depending on your location, you may have rights to:

  • Access: Request copies of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your personal data
  • Restriction: Request limiting processing of your data
  • Portability: Request transfer of your data to another organization
  • Objection: Object to processing of your data
  • Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@moolyka.org.

8. Children's Privacy

Moolyka is not intended for users under 18. We do not knowingly collect information from children. If we discover such collection, we will delete it promptly.

9. Changes to Privacy Policy

We may update this policy periodically. We will notify users of material changes via email or platform notification. Continued use after changes constitutes acceptance.

10. Contact Us

For privacy-related inquiries:

Data Protection Officer
Tideflash (Moolyka Platform)
Nairobi, Kenya
Email: info@moolyka.com
Phone: +254 717 622 774