Privacy Policy
This policy explains what personal data we collect, why we collect it, and the choices you have.
Last updated October 2026
Information we collect
Account details such as your name, email address, and phone number; the books you buy or publish; payment details processed by Safaricom M-Pesa; and technical data such as your device type and IP address.
How we use your data
To create and secure your account, process M-Pesa payments, issue and protect digital licences, pay authors, prevent fraud, and provide support.
Sharing
We share the minimum necessary information with payment and infrastructure providers (including Safaricom Daraja) to complete transactions. We do not sell your personal data.
Device locking
To protect authors, downloads are bound to a hashed device fingerprint. We store this fingerprint — not your raw hardware identifiers — solely to prevent licence sharing.
Your rights
Under the Kenya Data Protection Act you may request access to, correction of, or deletion of your personal data. Email hello@sokokitabu.co.ke to make a request.
Retention
We keep account and transaction records for as long as your account is active and as required for tax and legal compliance.
