Privacy Policy

Last updated 3 November 2026

This policy explains what PeerTok collects about you, why, who sees it, how long we keep it and what you can do about it. PeerTok is operated from Kenya and follows the Kenya Data Protection Act, 2019. If you are in another country, we apply the same protections to you.

1. What we collect

Your account: username, email address and a password (stored only as a one-way hash, never in readable form).
Your profile and what you post: display name, bio, city, photos, messages, stories, reactions and the Vibes you join. Public profile details and posts can be seen by other people, as the settings of each Vibe allow.
Identity verification for creators: your legal name, ID or passport type and number, and photos of your ID. These are used only to check who you are and to pay you to the right person. Sensitive fields are encrypted.
Payments: the phone number you pay from, the amount, the provider's receipt and reference numbers. Card details are entered on our payment provider's page and are never stored by PeerTok.
Payout details for creators: the full name on the account, your M-Pesa number or bank and account number. Account numbers are encrypted and shown to staff only when a payout needs them.
Vibe Mate: if you use it, your age, photos, answers and the messages in your connections. Vibe Mate is for adults only.
How the site is used: pages visited, how long a page was open, the country (and, where the network provides it, region or city), the website or ad that sent you, your device type and browser, and, when you are signed in, your username. We do not store your IP address in this analytics, and we respect the Do Not Track and Global Privacy Control signals your browser sends.
Security records: sign-in times, device information and a record of important actions on accounts and money. IP addresses used for security are kept only as a one-way hash.

2. Why we use it

Where the law requires a legal basis: we rely on the contract with you (providing the service), your consent (for example, Vibe Mate and optional notifications, which you can withdraw), our legitimate interest in running a safe and improving service, and legal obligation.

To run PeerTok: your account, communities, chat, events, tickets, shop and Vibe Mate.
To take payment and to pay creators, to refund purchases, and to keep accurate financial records.
To keep people safe and the platform honest: moderation, fraud and abuse detection, and checking that payouts go to the person they belong to.
To help you: support, notifications you have asked for, and essential service messages by email.
To understand and improve PeerTok: how many people visit, which pages are useful and where visitors come from.
To meet legal obligations, such as tax and anti-money-laundering rules.

4. How long we keep it

Visitor analytics (visits and page views): deleted after 400 days.
Your account, profile, messages and uploads: until you delete them or your account.
Financial records (orders, payments, refunds, payouts): kept for as long as the law requires, normally up to seven years, even after you delete your account. After deletion they no longer carry your name.
The record of important actions on accounts and money (the audit log) is kept permanently and cannot be altered, which protects everyone. It holds no private content.
Sign-in sessions and security tokens: removed when they expire.

5. Your rights and choices

You can ask to see, correct, download or delete the data we hold about you, to object to how it is used, and to withdraw consent at any time. Most of this you can do yourself in your profile and settings (including downloading your data and deleting your account). For anything else, contact support and we will answer within 30 days.

Delete your account: your profile, messages, stories, files, wallet, payout accounts and Vibe Mate data are removed. Money records that other people's accounts depend on stay, shown as "Deleted member".
Analytics: switch on Do Not Track or Global Privacy Control in your browser and we will not count your visits.
Complaints: you can complain to the Office of the Data Protection Commissioner of Kenya (odpc.go.ke) if you think we have handled your data wrongly. We would like the chance to put it right first.

6. Cookies and similar storage

PeerTok uses a sign-in cookie that is needed for you to stay signed in, and small items stored in your browser for your preferences and to recognise a returning visitor in our own analytics. We do not use advertising cookies and we do not share this with advertising networks.

7. How we protect it

Passwords are hashed, sensitive details such as ID numbers and account numbers are encrypted, access is limited to staff who need it, important admin actions need a second person, and every important action is recorded. No system is perfectly secure; if something goes wrong that affects you we will tell you and the authorities as the law requires.

8. Where your data is stored

Our providers may store and process data in other countries. When they do, we require protection equal to what Kenyan law demands.

9. Children

PeerTok is not for children. Vibe Mate is only for adults (18 and over) and checks age. If you think a child has an account, tell us and we will remove it.

10. Changes and contact

If we make a significant change to this policy we will tell you in the app. Questions or requests: use the support page at peertok.com/support.