PRIVACY POLICY

1. INFORMATION WE COLLECT

We collect various types of information to provide and improve our services. The information we collect falls into the following categories:

1.1 Personal Information You Provide

1.2 Information Automatically Collected

1.3 Information from Third Parties

We may receive information about you from:

• M-Pesa and Payment Processors: Transaction confirmations and payment status
• Analytics Providers: Aggregated usage statistics
• Social Media Platforms: If you connect your social media accounts
• Advertising Partners: Ad performance and attribution data

2. HOW WE USE YOUR INFORMATION

We use the collected information for the following purposes:

2.1 Service Provision and Account Management

• Create and manage your user account
• Authenticate your identity and verify age requirements
• Process subscriptions and payments
• Deliver betting tips and predictions
• Provide customer support and respond to inquiries
• Send service-related notifications and updates
• Manage your preferences and settings

2.2 Service Improvement and Personalization

• Analyze usage patterns to improve app functionality
• Personalize content and recommendations
• Develop new features and services
• Conduct research and analytics
• Test and optimize app performance
• Understand user preferences and behavior

2.3 Communication and Marketing

• Send promotional offers and special deals (with consent)
• Provide updates about new features and tips
• Send newsletters and betting insights
• Conduct surveys and request feedback
• Notify you about subscription renewals

You can opt out of marketing communications at any time.

2.4 Security and Fraud Prevention

• Detect and prevent fraudulent activities
• Protect against unauthorized access
• Monitor for suspicious behavior
• Enforce our Terms and Conditions
• Comply with legal obligations
• Resolve disputes and troubleshoot problems

2.5 Legal and Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and court orders
• Verify age and gambling eligibility
• Maintain records for regulatory purposes
• Protect our legal rights and interests

3. INFORMATION SHARING AND DISCLOSURE

We may share your information in the following circumstances:

3.1 Service Providers and Business Partners

Category	Purpose	Data Shared
Payment Processors (M-Pesa, etc.)	Process payments and subscriptions	Phone number, transaction amounts, payment history
Analytics Providers	App performance and usage analysis	Anonymized usage data, device information
Cloud Storage Providers	Data storage and backup	Encrypted user data and app content
Customer Support Tools	Provide technical support	Contact information, support inquiries
Marketing Platforms	Send communications (with consent)	Email address, communication preferences

3.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Enforce our Terms and Conditions
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users
• Prevent fraud or illegal activities
• Cooperate with law enforcement investigations

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity. We will notify you of any such change in ownership or control of your personal information.

3.4 Consent-Based Sharing

We may share your information with third parties when you provide explicit consent, such as:

• Connecting to social media platforms
• Participating in promotional campaigns
• Sharing achievements or tips with friends
• Integrating with third-party betting platforms

4. DATA SECURITY AND PROTECTION

We implement comprehensive security measures to protect your personal information:

4.1 Technical Safeguards

• Encryption: All data is encrypted in transit and at rest using industry-standard protocols
• Secure Servers: Data stored on secure, regularly updated servers
• Access Controls: Strict access controls and authentication requirements
• Regular Security Audits: Periodic security assessments and vulnerability testing
• Secure APIs: All API communications use HTTPS and authentication tokens
• Database Security: Encrypted databases with restricted access

4.2 Organizational Safeguards

• Employee Training: Regular privacy and security training for all staff
• Access Limitations: Employee access limited to necessary information only
• Confidentiality Agreements: All employees sign confidentiality agreements
• Incident Response: Established procedures for security incident response
• Regular Updates: Continuous monitoring and updating of security measures

4.3 Payment Security

Financial information receives special protection:

• PCI DSS compliance for payment processing
• Tokenization of sensitive payment data
• Secure integration with M-Pesa and other payment providers
• Regular security assessments of payment systems
• Fraud detection and prevention systems

5. DATA RETENTION

We retain your information for different periods depending on the type of data and purpose:

5.1 Retention Periods

Data Type	Retention Period	Reason
Account Information	Until account deletion + 30 days	Service provision and support
Payment Records	7 years	Legal and tax requirements
Usage Analytics	2 years	Service improvement and analysis
Support Communications	3 years	Customer service and dispute resolution
Marketing Data	Until consent withdrawn + 30 days	Marketing communications
Security Logs	1 year	Security monitoring and fraud prevention

5.2 Data Deletion

We will delete your personal information when:

• The retention period expires
• You request account deletion
• The data is no longer necessary for the original purpose
• You withdraw consent (where applicable)
• We are legally required to delete the data

Note: Some information may be retained longer if required by law or for legitimate business purposes such as fraud prevention.

6. YOUR PRIVACY RIGHTS

You have several rights regarding your personal information:

6.1 Access and Portability

• Right to Access: Request a copy of your personal information
• Data Portability: Receive your data in a structured, machine-readable format
• Account Information: View and update your account details in the app

6.2 Correction and Updates

• Right to Rectification: Correct inaccurate or incomplete information
• Profile Updates: Update your profile information at any time
• Preference Changes: Modify your communication and privacy preferences

6.3 Deletion and Restriction

• Right to Erasure: Request deletion of your personal information
• Right to Restriction: Limit how we process your information
• Account Deletion: Delete your account and associated data

6.4 Consent and Objection

• Withdraw Consent: Withdraw consent for data processing
• Object to Processing: Object to certain types of data processing
• Marketing Opt-out: Unsubscribe from marketing communications

6.5 How to Exercise Your Rights

To exercise any of these rights:

1. In-App Settings: Use the privacy settings in the app
2. Email Request: Send a request to privacy@puntersure-tips.com
3. Written Request: Mail a written request to our address
4. Customer Support: Contact our support team

We will respond to your request within 30 days and may require identity verification.

7. COOKIES AND TRACKING TECHNOLOGIES

We use various technologies to collect and store information:

7.1 Types of Technologies Used

• App Analytics: Track app usage and performance
• Session Management: Maintain your login session
• Preferences Storage: Remember your settings and preferences
• Crash Reporting: Collect crash data to improve stability
• Push Notifications: Send relevant notifications

7.2 Third-Party Analytics

We may use third-party analytics services such as:

• Google Analytics for Mobile Apps
• Firebase Analytics
• Crashlytics for crash reporting
• Custom analytics solutions

7.3 Managing Tracking

You can control tracking through:

• App privacy settings
• Device privacy controls
• Advertising ID reset
• Opting out of analytics (where available)

8. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than your own:

8.1 Transfer Safeguards

• Adequacy Decisions: Transfers to countries with adequate protection
• Standard Contractual Clauses: EU-approved contract terms
• Certification Programs: Privacy Shield or similar frameworks
• Binding Corporate Rules: Internal privacy standards

8.2 Data Processing Locations

Your data may be processed in:

• Kenya (primary data center)
• European Union (backup and analytics)
• United States (cloud services)
• Other countries where our service providers operate

All international transfers are protected by appropriate safeguards to ensure your privacy rights are maintained.

9. CHILDREN'S PRIVACY

9.1 Age Verification

We implement measures to verify user age:

• Date of birth collection during registration
• Age verification prompts
• Account restrictions for underage users
• Regular compliance monitoring

9.2 Parental Rights

If you believe we have collected information from a child under 18:

• Contact us immediately at privacy@puntersure-tips.com
• We will investigate and delete the information
• We will take steps to prevent future collection
• We may implement additional verification measures

10. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• Changes in our data practices
• New features or services
• Legal or regulatory requirements
• Industry best practices
• User feedback and requests

10.1 Notification of Changes

We will notify you of material changes through:

• In-App Notification: Prominent notice in the app
• Email Notification: If you have provided an email address
• Push Notification: For significant changes
• Website Notice: Posted on our website

10.2 Effective Date

Changes become effective immediately upon posting unless otherwise specified. Your continued use of the app after changes constitutes acceptance of the updated policy.

11. CONTACT INFORMATION AND COMPLAINTS

11.1 Privacy Officer Contact

11.2 Data Protection Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority:

• Kenya: Office of the Data Protection Commissioner
• EU: Your local Data Protection Authority
• Other jurisdictions: Relevant privacy regulatory body

11.3 General Support