Privacy Policy

1. Who this policy covers

• Website visitors on getcenty.com (including demo and contact forms).
• Customer administrators and employees who use Centy Pay Hub or Centy Mobile under their employer's organisation.
• Device users of Centy Mobile for employee self-service (ESS), attendance, expenses, wallets, CentyGuard field ops, and CentyFleet driver features where enabled.

Where your employer is the organisation that invited you, they typically act as a data controller for workplace HR/payroll data; Centy processes that data to provide the Platform as a service provider. Website demo enquiries are controlled by Centypay Limited.

2. Information we collect

Website & demo forms

• Details you submit (name, work email, company, phone, role, message).
• Technical data such as IP address, browser type, and basic usage logs to respond to you and protect the service.

Account & identity

• Login credentials and account profile (name, email, phone, role, organisation membership).
• Authentication and session data (including mobile session tokens stored securely on device).
• Where applicable for payments/KYC: business details and verification information required to operate the Platform.

HR, payroll & finance (product)

• Employment and payroll-related records your organisation configures or imports (e.g. employee master data, payslips, leave, expenses, advances, loans).
• Wallet and payment activity (including M-Pesa / bank references needed to fund, send, or reconcile money movement).
• Documents and images you or your organisation upload (e.g. expense receipts, employee documents).

Centy Mobile — device permissions & field data

• Location: precise or approximate GPS when you clock in/out, record fleet duty events, or use CentyGuard features (site check-in, patrol, SOS) so attendance and security events can be verified. Location is collected only when you use those features and after you grant permission.
• Camera: to scan QR codes for guard clock-in and to photograph expense receipts. Photos/scans you capture may be uploaded to your organisation's Centy workspace.
• Device & diagnostics: device type, app version, crash/performance signals, and push notification tokens where notifications are enabled.
• Offline queues: limited action data may be stored temporarily on device until connectivity returns (e.g. queued guard or fleet events).

3. How we use information

• To provide, operate, secure, and improve Centy websites, Pay Hub, and Centy Mobile.
• To authenticate users, enforce roles/permissions, and prevent fraud or abuse.
• To deliver HR/payroll/ESS workflows your organisation enables (attendance, leave, payslips, expenses, wallets, guard and fleet operations).
• To process payments and communicate service notices (including SMS/email/push where configured).
• To respond to demo requests and customer support.
• To meet legal, regulatory, tax, and accounting obligations.

4. Sharing

We share personal data only as needed to run the Platform: with your employing organisation and its authorised administrators; with infrastructure and communications providers (e.g. hosting, email, SMS); with payment partners and networks (e.g. M-Pesa / banks) to complete transactions you or your organisation initiate; and with regulators or law enforcement when required by law. We do not sell personal information.

5. Retention

We retain information for as long as needed to provide the services, meet employer/customer retention requirements, and satisfy legal, regulatory, and security obligations. Device-side session and offline data are kept only as long as needed for the feature to work. When data is no longer required, we delete or anonymise it in line with our retention practices.

6. Security

We use technical and organisational measures appropriate to the risk, including encrypted transport (HTTPS), access controls, and secure storage of mobile session tokens. No method of transmission or storage is completely secure; please protect your device and credentials.

7. Your rights

Depending on applicable law (including the Kenya Data Protection Act), you may have rights to access, correct, delete, or object to certain processing of your personal data, and to lodge a complaint with the Office of the Data Protection Commissioner (Kenya) where applicable.

• Employees: start with your employer/HR admin for workplace records held in their Centy organisation; you may also contact us and we will coordinate where appropriate.
• Website / demo enquiries: email hello@getcenty.com.
• Product support: support@centyhq.com.

8. Children

Centy products are business tools intended for authorised adult users of customer organisations. They are not directed at children.

9. International processing

Data may be processed on infrastructure in Kenya and/or other jurisdictions where our service providers operate. We take steps appropriate to the transfer and the nature of the data.

10. Changes

We may update this policy from time to time. The "Last updated" date will change when we do. Material changes may also be communicated in-product or by email where appropriate. Continued use after the effective date constitutes acceptance of the updated policy.

11. Contact

Centypay Limited
Privacy / legal: hello@getcenty.com
Product support: support@centyhq.com

This page is the canonical privacy policy for Centy marketing, Pay Hub, and Centy Mobile store listings. Pay Hub also links here from app.centyhq.com/privacy.