Privacy Policy

Last updated: March 31, 2026

PartyPass ("we", "our", or "us") is operated by Web Masters KE. This Privacy Policy explains how we collect, use, and protect your personal information when you use the PartyPass mobile app and website (collectively, the "Service").

1. Information We Collect

• Account information: Name, email address, phone number, and password when you register.
• Profile information: Profile photo and preferences you choose to provide.
• Transaction data: Ticket purchases, M-Pesa payment references, and booking history.
• Device information: Device type, operating system, and unique device identifiers.
• Camera & photos: Only when you explicitly use QR scanning or upload venue/event photos.
• Usage data: Pages visited, features used, and interactions within the app.

2. How We Use Your Information

• To create and manage your account.
• To process ticket purchases and event bookings.
• To send event reminders and booking confirmations via push notification or SMS.
• To verify your identity at event gates via QR code.
• To improve the app and personalise your experience.
• To comply with legal obligations and prevent fraud.

3. Sharing Your Information

We do not sell your personal data. We share information only with:

• Event organisers: Your name and ticket details to verify attendance.
• Payment processors: M-Pesa (Safaricom) for processing payments securely.
• Cloud providers: AWS for secure data storage (Kenya / EU regions).
• Legal authorities: When required by Kenyan law or court order.

4. Data Retention

We retain your account data for as long as your account is active. Transaction records are kept for 7 years as required by Kenyan financial regulations. You may request deletion of your account at any time.

5. Your Rights

• Access, correct, or delete your personal data.
• Withdraw consent for marketing communications at any time.
• Request a copy of your data in a portable format.
• Lodge a complaint with the Kenya Office of the Data Protection Commissioner.

6. Security

We use industry-standard encryption (HTTPS/TLS) for all data in transit and AES-256 encryption for data at rest. Passwords are hashed using bcrypt and never stored in plain text. Access to production systems is restricted to authorised personnel only.

7. Children's Privacy

PartyPass is intended for users aged 18 and above. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal data, contact us immediately.

8. Third-Party Links

The app may contain links to third-party services (e.g. event websites). We are not responsible for the privacy practices of those services and encourage you to read their policies.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the app or email. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

For any privacy-related questions or requests, contact us at:
Email: privacy@partypass.co.ke
Address: Web Masters KE, Nairobi, Kenya