Your privacy matters to us. This Privacy Policy explains what information MaohBoost collects, how we use it, and the choices you have regarding your data. No KYC or identity document upload is required.
When you register and use MaohBoost, we collect the following types of information:
Account information: username, email address, and password (securely hashed)
Contact information: phone number for M-Pesa payment processing
Transaction data: deposit amounts, payment receipts, order history, and wallet balance
Usage data: IP address, browser type, device information, and pages visited
Communication data: support ticket messages and any correspondence with our team
We do NOT collect or require identity documents, national IDs, passports, or any form of KYC verification.
We use the information we collect to:
Create and manage your account
Process payments and credit your wallet
Fulfill and track your orders
Send you important notifications about your account, orders, and payments
Provide customer support and respond to your inquiries
Detect and prevent fraud, abuse, and unauthorized access
Improve our services, website performance, and user experience
Comply with applicable legal obligations
We do not sell your personal information to third parties.
Payment processing is handled through our trusted payment partner, Tuma (tuma.co.ke), for M-Pesa Express transactions. When you make a deposit:
Your phone number is sent securely to Tuma to initiate the M-Pesa STK Push
Tuma processes the payment through Safaricom's M-Pesa infrastructure
We receive only the payment status, amount, and M-Pesa receipt number
We do NOT store your M-Pesa PIN, bank account details, or full card numbers
Payment receipts are stored securely for audit and dispute resolution purposes
All payment data is transmitted over encrypted (HTTPS) connections.
We use cookies and similar technologies to operate and improve our website:
Essential cookies: required for authentication, session management, and core functionality. These cannot be disabled.
Analytics cookies: help us understand how visitors use our site so we can improve performance and user experience. These are anonymous and do not contain personal identifiers.
Preference cookies: remember your settings such as language or theme preferences
You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect core functionality but may limit some features. For more details, see our Cookie Policy.
We take data security seriously and implement industry-standard measures to protect your information:
All data is transmitted over HTTPS (TLS 1.2+) encrypted connections
Passwords are securely hashed using bcrypt — we never store plain-text passwords
Sensitive provider credentials are encrypted using AES-256 encryption
Row-Level Security (RLS) policies enforce data isolation between users
Wallet balances can only be modified through secure server-side functions, not direct database access
Regular security audits and vulnerability assessments are conducted
Financial transaction records are immutable and cannot be deleted
Despite our efforts, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.
You have the following rights regarding your personal data:
Right to access: you can view your account data through your dashboard
Right to correction: you can update your profile information at any time
Right to deletion: you can request account deletion by contacting support
Right to data export: you can request a copy of your data
Right to object: you can object to certain data processing activities
Right to withdraw consent: you can disable non-essential cookies and marketing communications
To exercise any of these rights, please contact our support team through the website.
MaohBoost integrates with the following third-party services:
Tuma (tuma.co.ke): M-Pesa Express payment processing
Supabase: database hosting, authentication, and real-time updates
Cloudflare: website hosting, CDN, and security (DDoS protection, SSL)
Social media APIs: for order delivery through provider platforms
Each third-party service has its own privacy policy. MaohBoost is not responsible for how third parties handle your data once it is shared with them for service delivery. We share only the minimum data necessary to provide the requested service.
We retain your personal data for as long as your account is active. Transaction records, payment receipts, and audit logs are retained for a minimum of 5 years for legal, accounting, and dispute resolution purposes, even after account deletion. You may request deletion of your account and personal data at any time, subject to our legal obligations to retain certain records.
MaohBoost is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will take steps to delete such information.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated 'Last Updated' date. We encourage you to review this policy periodically. Significant changes will be communicated through platform notifications where possible.
If you have any questions about this Privacy Policy or how we handle your data, please contact the MaohBoost Support Team through the contact methods provided on the website, including WhatsApp, email, or the in-dashboard support ticket system.