Privacy policy

Last updated 9 October 2026

In short: we collect only what we need to prepare your documents, we use it only for your case, we never sell it, and you can ask us to see, correct or delete it at any time.

Who we are

MamaHaki ("we", "us") is a technology service based in Nairobi, Kenya. We help parents get child maintenance by preparing legal documents through a WhatsApp chat. Our partner law firm reviews, signs and issues every document. This policy explains how we handle personal information under the Data Protection Act, 2019.

What we collect

From a mother or guardian who uses the service:

Your name and WhatsApp phone number.
Your child's name and date of birth.
The father's name and phone number.
Details of the support owed, such as the amount and for how long it has not been paid, and the terms you want in an agreement.
Your chat messages with Amina.
Payment details from M-Pesa: the amount, the transaction code and the paying phone number. We never see your M-Pesa PIN.
The documents we prepare for you.

From a father who is asked to approve a Parental Responsibility Agreement:

Your name and phone number, as given by the mother.
The result of the SMS code check, the ID number you type in, and the result of your identity check.
Your decision on the agreement and any changes you ask for.

Your ID photos and selfie are taken and stored by our identity verification provider, Didit. They are not stored on our servers. We receive only the result of the check.

Some of this information, such as family details, is sensitive personal data under the Act. We process it only for your case and only with your consent.

Why we use it

To prepare, review, sign and deliver the documents you ask for.
To confirm a father's identity before he can approve an agreement, so that no one can approve it in his name.
To take and confirm payments.
To follow up on your case, for example to ask whether the father responded.
To keep the service safe and prevent fraud.
To meet our legal obligations.

Our legal grounds are your consent, the service you asked us to provide, and our legal obligations.

Children's information

We process a child's information only with the consent of the parent or guardian who uses the service, and only to pursue support for that child.

Amina, our AI assistant

Amina is an AI assistant. Your messages are processed by our AI provider, Anthropic, so that Amina can reply. Amina collects details and explains the process. She does not make legal decisions: a licensed advocate reviews every document before it is issued.

Who we share it with

We share information only as far as needed to run the service:

Our partner law firm, which reviews, signs and issues your documents.
Meta (WhatsApp), which carries our chat messages.
Safaricom (M-Pesa), which processes payments.
Anthropic, which provides the AI model behind Amina.
Didit, which verifies a father's identity.
Africa's Talking, which sends SMS codes.
Telegram, through which the advocate receives cases and documents for review in a private channel.
Cloudflare, which runs this website, protects the connection to our servers and stores encrypted backups.
Our server hosting provider.

The documents themselves go to the people they are meant for: a demand letter is for the father, and a signed agreement goes to both parents. We do not sell personal information and we do not use it for advertising.

Information stored outside Kenya

Some of these providers store or process information outside Kenya. We use only providers that protect personal information, and we transfer it only as the Data Protection Act allows.

How long we keep it

We keep your case records and signed documents while your case is open, and afterwards only for as long as the law requires us or our partner firm to keep them. Then we delete them. Chat messages that are not needed for your case are deleted sooner.

How we protect it

All connections to our service are encrypted.
Only the people who work on your case can see it.
Every signed document carries a digital signature that shows if anyone changes it.
Backups are encrypted.

Your rights

Under the Data Protection Act, 2019 you have the right to:

be told how your information is used;
see the information we hold about you;
have wrong or misleading information corrected or deleted;
object to us using your information;
get a copy of your information in a format you can take elsewhere.

To use any of these rights, email privacy@mamahaki.co.ke or see how to delete your data. If you are unhappy with how we handled your information, you can complain to the Office of the Data Protection Commissioner at odpc.go.ke.

This website

This website does not use cookies for tracking or advertising, and it does not collect information about you.

Changes

If we change this policy, we will update the date at the top. If a change affects how we use information you have already given us, we will tell you on WhatsApp.