1. Scope
This Privacy Policy applies to the Stelo public website, Android application and related account, credit, repayment and support services. It describes the product's intended data-handling model. A specific loan agreement, identity-verification flow or external service may provide additional notices where required.
2. Information we handle
Depending on the feature you use, Stelo may handle account and contact details; identity or verification information where required; declared employment, income, expense, liability and affordability information; credit-profile and score outputs; loan applications, quotes, decisions, balances and repayment history; M-Pesa transaction references and payment results; trust-based relationship or relevant guarantee exposure; device, app, security and diagnostic information; and messages or evidence you send to support or through a complaint.
Account & identity
Name, verified email/phone, account identifiers and verification evidence where the product requires it.
Financial profile
Income/cash-flow context, recurring obligations, liabilities, exposure, affordability outputs and verification confidence.
Credit & repayment
Eligibility, limits, product state, quote, application, decision, disbursement, repayment and transaction references.
Device & support
App version, device/technical events, security logs, support messages and complaint records needed to diagnose or resolve issues.
3. How we use information
We use relevant information to create and secure accounts; verify contact or identity information where necessary; build and update the Stelo Credit Profile; assess affordability, exposure and eligibility; generate account-specific credit options and quotes; process loan requests; support M-Pesa disbursement and repayment; detect fraud or abuse; maintain financial and audit integrity; provide support; resolve complaints; improve reliability; and meet applicable legal or contractual obligations.
4. Consent-led financial-data analysis
On supported Android devices and where the customer provides the relevant permission or consent, Stelo is designed to identify relevant transaction messages locally, derive financial aggregates such as income/cash-flow patterns or recurring obligations, and transmit the derived assessment inputs needed by the server. Raw message history is not intended to be the credit-analysis payload.
Stelo may also use information you enter directly, information generated by your use of the service, and verification or credit information from approved external sources where that check is applicable and appropriately authorised.
6. Retention
Different information has different retention needs. Account profile data may be removed or de-identified when it is no longer needed, while credit agreements, financial transaction records, payment references, fraud/security records, audit trails and complaint records may need to remain for longer periods to preserve legal, accounting, dispute, security or integrity requirements.
7. Security
Stelo uses authenticated access, server-authoritative financial calculations, access controls, payment-result verification and operational logging intended to protect account and financial information. No system can guarantee absolute security. Protect your password, app PIN, one-time codes, SIM and device access, and contact support promptly if you suspect compromise.
8. Your choices and privacy rights
You can correct many account details through the product. Depending on applicable law and the nature of the information, you may also request access, correction, deletion, restriction, objection or information about processing, and may withdraw consent where a particular processing activity relies on consent. Some processing is necessary to administer an account, loan, repayment, security control or legal obligation and therefore cannot simply be switched off while that service remains active.
9. Account deletion
Closing your Stelo account ends normal access and triggers the account-deletion workflow. It does not necessarily erase every financial, payment, security, audit or complaint record immediately. See Account Deletion for the request path and retention explanation.
10. Changes to this policy
We may update this policy as Stelo features, service providers, security controls or legal requirements change. The current page will show the latest effective date. Material changes may also be communicated in the app or another appropriate channel.
11. Contact
For privacy questions or requests, email support@stelo.co.ke. Do not send passwords, PINs, one-time codes or unnecessary identity documents by ordinary email.