Privacy Policy

This policy explains what personal data we collect, why we collect it, and the choices you have.

Last updated October 2026

Information we collect

Account details such as your name, email address, and phone number; the books you buy or publish; payment details processed by Safaricom M-Pesa; and technical data such as your device type and IP address.

How we use your data

To create and secure your account, process M-Pesa payments, issue and protect digital licences, pay authors, prevent fraud, and provide support.

Sharing

We share the minimum necessary information with payment and infrastructure providers (including Safaricom Daraja) to complete transactions. We do not sell your personal data.

Device locking

To protect authors, downloads are bound to a hashed device fingerprint. We store this fingerprint — not your raw hardware identifiers — solely to prevent licence sharing.

Your rights

Under the Kenya Data Protection Act you may request access to, correction of, or deletion of your personal data. Email hello@sokokitabu.co.ke to make a request.

Retention

We keep account and transaction records for as long as your account is active and as required for tax and legal compliance.