1. Scope
SpekitaPay supports payment lookup, payment initiation, payment-status confirmation and customer support for eligible Spekita device-purchase installment arrangements. SpekitaPay does not originate or disburse general-purpose cash loans.
2. Information We Collect
Depending on the payment flow, we may process:
- Customer contact information, including a phone number used to identify or initiate a payment.
- Account, installment agreement, order or device references needed to locate the correct payment obligation.
- Payment information such as amount due, amount paid, payment reference, transaction ID, provider name, payment status, date and time.
- Limited device and technical details, including app version, device or account reference passed through an authorized Spekita flow, network status and diagnostic logs.
- For the Google Play version, encrypted app, license and device-integrity signals processed through Google Play Integrity, including app package, version and signing metadata, Play licensing status and device-attestation results.
3. Payment Providers
Payments may be initiated or verified through approved third-party payment providers, including ClickPesa where applicable. Those providers process payment instructions under their own terms and privacy practices. SpekitaPay receives only the information necessary to create, verify and reconcile the transaction.
4. Information We Do Not Collect
SpekitaPay does not request, store or process mobile money PINs, bank passwords, full card numbers, CVV codes or other full payment-account credentials. When Android biometric or device confirmation is used before a payment, verification is handled by Android and SpekitaPay does not receive or store biometric data.
5. How We Use Information
- Identify the correct customer account, device, installment agreement or payment obligation.
- Initiate, verify, reconcile and display payment status.
- Provide payment receipts, support, dispute handling and account updates.
- Prevent fraud, duplicate payments and unauthorized payment activity.
- Maintain accounting, audit and legal records.
6. Sharing, Retention and Security
We do not sell payment or personal data. We share limited information only with approved payment providers, Spekita systems, hosting providers and professional advisers when needed for the stated purposes or required by law. Google and our contracted infrastructure provider process Play Integrity security signals on our behalf; SpekitaPay does not use those signals to fingerprint users, advertise, or track users across services. Payment and transaction records are retained as necessary for reconciliation, customer support, accounting, fraud prevention, audit and legal obligations. SpekitaPay may store limited encrypted session, payment-follow-up and installment-summary data on the device so that pending-payment checks, optional reminders and offline account summaries can work reliably. We use reasonable technical and organizational safeguards to protect these records.
7. Enrolled Device Management
The following notice applies to devices enrolled through an authorized Spekita managed-device or financing process, including existing managed-device installations. Installing the ordinary consumer version of SpekitaPay does not enroll a device into management or grant device-management privileges.
Scope and Managed-Device Notice
SpekitaPay device management is a service for eligible Android devices that are financed, leased, owned or otherwise managed by Spekita or its authorized partners. Depending on the enrollment method, it may operate with Android Enterprise Device Owner or other approved device-management privileges.
SpekitaPay device management is not designed for hidden monitoring, personal spying, advertising profiling, unauthorized tracking or access to private user content.
Information We Collect
We may process only information necessary for device management, financing, support, security and release workflows:
- Device identifiers such as IMEI, serial number, Android ID, Spekita device ID, enrollment ID or provisioning reference where lawfully available.
- Device details including model, manufacturer, Android version, app version and build information.
- Enrollment, activation, policy, compliance, access-status, last-sync and service-check-in records.
- Limited account, payment, contract and device-release status, including amount due or due date where applicable.
- Firebase Cloud Messaging token or equivalent notification token, network availability, technical diagnostics and security audit logs.
Information We Do Not Collect
SpekitaPay device management does not collect or upload SMS content, call recordings, contact lists, personal photos or videos, microphone audio, camera images, precise GPS location, browsing history, calendar content, personal files, social-media messages, mobile money PINs, bank passwords or full card details.
How We Use Information
- Confirm that the correct device is linked to the correct customer or agreement.
- Apply or remove authorized device policies and service status changes.
- Verify payment, contract, restoration, release and deprovisioning eligibility.
- Prevent fraud, unauthorized device transfer, misuse and contract abuse.
- Provide support, diagnostics, audit records and legal compliance.
Device Management Actions
For eligible managed or financed devices, SpekitaPay device management may receive authorized updates to activate a device, apply device policies, temporarily restrict access according to the applicable agreement, restore access after verified payment or authorization, and release or deprovision the device when the required payment or ownership process is completed.
Sharing, Retention and Security
We do not sell device or personal data. Limited data may be processed by approved Spekita backend, hosting, device-management, payment-verification and support providers only for authorized purposes, or disclosed where required by law. Records are retained only as needed for device financing, support, payment verification, fraud prevention, audit, dispute resolution and legal obligations. We use reasonable safeguards including HTTPS/TLS, access controls, audit logs and restricted privileged access.
Contact Us
For privacy questions, correction, access, or deletion requests, contact support@spekita.com with the subject line “SpekitaPay Privacy Policy Privacy Request”. We may need to verify your identity and may retain limited records where required for security, fraud prevention, accounting, contract, audit, or legal obligations.
Changes to This Policy
We may update this policy when the service, legal requirements, or our data practices change. The current version will be published on this page with its effective date.