CHAMAPAY
Welcome back! Please select your portal
Didn't receive the code? Resend OTP
Membership Number
Enter your membership number provided during registration.
CHAMAPAY
Welcome back! Please select your portal
Didn't receive the code? Resend OTP
Enter your membership number provided during registration.
Enter your registered phone number to receive a recovery code.
Credentials Recovered!
Name:
Membership Number:
Last Updated: June 2026
Welcome to ChamaPay ("Platform"), operated by Nelimax Technologies. By accessing or using ChamaPay, you agree to these Terms of Service ("Terms"). If you do not agree, do not use the Platform.
"Chama" means a self-help group, chama, or SACCO registered on the Platform. "Admin" means a member with administrative privileges for a Chama. "Member" means any individual registered under a Chama on the Platform. "Services" means all features including savings management, loan administration, contributions, attendance tracking, voting, document management, financial reporting, and M-Pesa payment processing.
You must be at least 18 years old and legally capable of entering binding contracts. Each Chama is responsible for verifying that its members meet eligibility requirements. By registering, you confirm you meet these requirements and have the authority to act on behalf of your Chama if you are an Admin.
Access to ChamaPay requires an access code provided by your Chama administrator. You are responsible for maintaining the confidentiality of your access code and PIN. You must immediately notify ChamaPay of any unauthorized access. ChamaPay is not liable for losses caused by unauthorized use of your account. Each Chama Admin is responsible for managing member access, including registration, suspension, and removal.
ChamaPay facilitates group financial management including contributions, savings, loans, fines, share purchases, and withdrawals via M-Pesa (Safaricom Daraja API). ChamaPay acts as a technology platform and is not a bank, SACCO, or licensed financial institution. All funds flow directly between members' M-Pesa accounts and the Chama's designated paybill/till number. ChamaPay does not hold, manage, or have custody of any member funds. Transaction fees charged by Safaricom or payment gateways are separate from ChamaPay's services. ChamaPay is not responsible for M-Pesa service outages, transaction failures, or delays caused by Safaricom.
Members agree to contribute amounts as determined by their Chama's rules. Contribution schedules, amounts, and penalties for late payment are set by the Chama Admin and enforced through the Platform. ChamaPay records and tracks contributions but does not guarantee collection. Withdrawals from savings are subject to the Chama's withdrawal policy configured by the Admin. The Platform maintains transparent ledgers of all transactions.
Loan applications, approvals, interest rates, repayment schedules, and penalties are managed by the Chama Admin through the Platform. ChamaPay provides the tools for loan administration but does not issue, guarantee, or underwrite any loans. Loan terms are between the borrower and the Chama. Default on loan repayment may result in fines, deduction from savings, or other consequences as configured by the Chama Admin. Guarantors assume liability for guaranteed loans as per the Chama's policies.
Chama Admins may impose fines for missed contributions, late payments, unexcused absences, or other rule violations as defined in the Chama's constitution. The Platform records and tracks all fines. Members may pay fines via M-Pesa through the Platform. Unpaid fines may affect loan eligibility and savings withdrawal as configured by the Admin.
ChamaPay supports digital voting for group decisions. Votes cast through the Platform are final and binding within the Chama. Each member gets one vote per poll unless the Chama's rules specify otherwise. The Platform records votes transparently. Results are determined by the voting rules configured by the Admin (simple majority, two-thirds, etc.).
Members may upload identification documents, loan agreements, and other files through the Platform. Uploaded documents are stored securely and accessible only to authorized Chama members and administrators. Members are responsible for the accuracy and authenticity of uploaded documents. ChamaPay reserves the right to remove documents that violate these Terms.
Each Chama operates in an isolated data environment. Chama A cannot access, view, or interact with Chama B's data. ChamaPay enforces strict tenant isolation at the database level. However, ChamaPay's technical staff may access data for maintenance and support purposes under strict security protocols.
You agree not to: (a) use the Platform for any unlawful purpose; (b) attempt to access other users' accounts or data; (c) introduce malware or harmful code; (d) reverse engineer or attempt to extract source code; (e) use automated tools to access the Platform; (f) manipulate financial records or contributions; (g) use the Platform to money-launder or finance illegal activities; (h) impersonate another member or Chama; (i) circumvent payment mechanisms or contribute false payment confirmations.
ChamaPay may charge subscription fees for Chama administration. Fee structures are communicated during registration and may be updated with 30 days' notice. Transaction fees charged by M-Pesa/Safaricom are separate and not controlled by ChamaPay. Free tiers may be available. All fees are non-refundable unless required by applicable law.
All content, code, design, and branding on ChamaPay are the intellectual property of Nelimax Technologies. You are granted a limited, non-exclusive, non-transferable license to use the Platform for its intended purpose. You may not copy, modify, distribute, or create derivative works from the Platform.
Your Chama's financial data, member records, and documents belong to your Chama. ChamaPay acts as a data processor. Upon termination, you may request export of your Chama's data within 30 days. After 30 days, data may be permanently deleted per our retention policy. ChamaPay may retain anonymized, aggregated data for analytics.
ChamaPay strives for 99.9% uptime but does not guarantee uninterrupted service. Scheduled maintenance windows will be communicated in advance. ChamaPay is not liable for losses caused by service interruptions, including but not limited to missed contribution deadlines or failed loan applications during downtime.
ChamaPay is provided "as is" and "as available" without warranties of any kind, express or implied. We do not warrant that the Platform will be error-free, secure, or available at all times. ChamaPay does not provide financial advice. All financial decisions are made by Chama members and administrators independently.
To the maximum extent permitted by law, ChamaPay and Nelimax Technologies shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business opportunities. Our total liability shall not exceed the fees paid by your Chama in the 12 months preceding the claim. We are not liable for disputes between Chama members, financial losses from Chama decisions, or M-Pesa transaction failures.
You agree to indemnify and hold harmless ChamaPay, Nelimax Technologies, and their officers, directors, and employees from any claims, losses, or damages arising from your use of the Platform, violation of these Terms, or infringement of any third-party rights. Chama Admins indemnify ChamaPay against claims arising from their management of Chama data and member interactions.
ChamaPay may suspend or terminate your access for violation of these Terms, non-payment, or fraudulent activity, with or without notice. You may terminate your account by contacting support. Upon termination, your right to use the Platform ceases immediately. Sections 13-19 survive termination.
Any disputes arising from these Terms shall first be resolved through good-faith negotiation. If unresolved within 30 days, disputes shall be submitted to binding arbitration in Nairobi, Kenya under the Arbitration Act. The governing law is the laws of the Republic of Kenya.
ChamaPay reserves the right to modify these Terms at any time. Material changes will be communicated via email or in-app notification at least 30 days before taking effect. Continued use after changes constitutes acceptance. If you disagree with changes, you must stop using the Platform and close your account.
For questions about these Terms, contact us at:
Nelimax Technologies
Email: support@chamapay.co.ke
Website: chamapay.co.ke
Last Updated: June 2026
ChamaPay ("we", "us", "our"), operated by Nelimax Technologies, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our platform.
Account Information: Name, phone number, email address, member ID, and access codes provided during Chama registration.
Financial Data: Contribution records, savings balances, loan applications, repayment history, fine records, share purchases, and withdrawal records.
Payment Data: M-Pesa transaction references, phone numbers used for STK push, and payment confirmations. We do not store M-Pesa PINs or full M-Pesa account details.
KYC Documents: National ID copies, passport photos, payslips, and other documents uploaded for loan applications or identity verification.
Attendance Records: Meeting attendance status (present/absent) as recorded by Chama Admins.
Usage Data: Device information, IP addresses, browser type, app version, login timestamps, pages visited, and feature usage patterns.
Communication Data: Messages sent through the Platform's contact-admin feature, notifications, and SMS delivery status.
We use your data to: (a) provide and maintain the Platform's financial management services; (b) process M-Pesa contributions, payments, and withdrawals; (c) manage loan applications, approvals, and repayment tracking; (d) generate financial reports and statements for your Chama; (e) send transaction notifications, OTPs, and system alerts via SMS and email; (f) verify member identity and prevent fraud; (g) enforce Chama rules (fines, missed contributions); (h) improve Platform features and user experience; (j) comply with legal and regulatory requirements; (k) communicate service updates and changes.
We share data only as follows:
Within Your Chama: Your financial records, contribution history, and member profile are visible to your Chama Admin and designated officials as configured by the Admin.
Safaricom (M-Pesa): Transaction data is shared with Safaricom solely to process STK push payments and verify transactions via the Daraja API.
SMS Providers: Phone numbers are shared with SMS delivery services solely to send OTPs and transaction notifications.
Legal Requirements: We may disclose data if required by law, court order, or regulatory authority.
We do not: Sell your data to advertisers. Share data between different Chamas. Share data with unrelated third parties for marketing. Allow cross-tenant data access.
We implement industry-standard security measures: (a) AES-256 encryption for stored sensitive data; (b) TLS/SSL encryption for all data in transit; (c) Bcrypt/Argon2 password hashing; (d) Session fingerprinting and token-based authentication; (e) Multi-tenant database isolation preventing cross-group data access; (f) Regular security audits and penetration testing; (g) Role-based access controls limiting data visibility; (h) Automatic session expiration and token revocation.
While we implement robust security, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but will notify affected users within 72 hours of any confirmed breach.
We retain your data for as long as your Chama account is active. After account deletion or Chama dissolution: (a) Financial records are retained for 7 years as required by Kenyan tax and financial regulations; (b) KYC documents are deleted within 90 days; (c) Usage logs are anonymized after 12 months; (d) Member profiles are deleted within 30 days of Chama closure unless legal retention applies.
Under applicable data protection laws (including Kenya's Data Protection Act, 2019 and GDPR where applicable), you have the right to: (a) Access — request a copy of all personal data we hold about you; (b) Rectification — request correction of inaccurate data; (c) Deletion — request deletion of your personal data (subject to legal retention requirements); (d) Portability — request export of your data in a machine-readable format; (e) Restriction — request restriction of processing in certain circumstances; (f) Objection — object to processing based on legitimate interests; (g) Withdraw Consent — withdraw consent for data processing at any time.
To exercise these rights, contact our Data Protection Officer at privacy@chamapay.co.ke. We will respond within 30 days.
ChamaPay uses essential session cookies for authentication and security. We use Google Analytics for aggregate usage statistics. We do not use advertising cookies or cross-site tracking. Session cookies are HttpOnly and Secure, lasting until your session expires.
ChamaPay is not intended for users under 18 years of age. We do not knowingly collect data from minors. If we discover a minor's data has been collected, it will be deleted immediately.
Your data is stored on servers located in Kenya. If you access ChamaPay from outside Kenya, you consent to your data being transferred to and processed in Kenya. We ensure appropriate safeguards are in place for international transfers where required.
For privacy-related inquiries or complaints, contact our Data Protection Officer:
Email: privacy@chamapay.co.ke
Address: Nelimax Technologies, Nairobi, Kenya
Response Time: Within 30 days of receiving your request.
We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notification at least 30 days before taking effect. The "Last Updated" date at the top reflects the most recent revision. Continued use after changes constitutes acceptance.
For any questions about this Privacy Policy:
Nelimax Technologies
Email: privacy@chamapay.co.ke
Website: chamapay.co.ke