Kenya
Menu
Effective Date: September 12, 2025
This Privacy Policy describes how data will be collected and processed when customers use Tala’s platforms. If you have questions about this page, you may reach out to our Data Protection Officer at ke-dpo@tala.co or to our customer care team at hellokenya@talamobile.com.
When you access Tala’s platforms and services, we will collect data to process your transactions and requests. Your data may be processed by our partners and service providers. Tala will also process your data to comply with legal obligations, including KYC, anti money laundering, positive and negative credit reporting, and tax payment. We may also use your data to improve our services and send you offers. Read this Privacy Policy to know more and to understand your rights as a data subject.
Tala may inform you about major updates to this Privacy Policy through notifications in the Tala mobile app, SMS, messaging service, or email.
1.1 Tala as a Data Controller. Tala (InVenture Mobile Limited) is the registered Data Controller responsible for processing your personal data when you use our services. Tala is a licensed Digital Credit Provider regulated by several government bodies, including the Central Bank of Kenya (CBK), the Financial Reporting Centre (FRC), and the Kenya Revenue Authority (KRA).
1.2 Tala as a Joint Controller. Tala may partner with other organisations (who are likewise data controllers) to provide integrated or embedded services to you. In such cases, your data will be processed in accordance with the privacy policies of each data controller.
1.3 Tala as a Data Processor. Tala may act as a data processor for a data controller with whom you have an account or contractual relationship. In such cases, Tala will act according to the instructions of the data controller and you may refer to the privacy notice or policy provided to you by the data controller.
1.4 Tala Platforms. Tala offers financial services through the Tala mobile app, the Tala websites, the Tala Biashara Club site, Unstructured Supplementary Service Data (USSD).
1.5 Tala’s Service Providers
Tala engages service providers (data processors) that help us provide services to you. They include:
1.6 Tala’s Partners
Tala partners with other organisations to provide integrated or embedded credit services to individuals, either on Tala Platforms or on the partner’s platforms. Our partners may include:
1.7 Protection of Tala’s Interests
2.1 ID Data. We need data to confirm your identity: your national ID number, full name, date of birth, birthplace, and photos of your likeness and your national ID.
2.2 Contact Details. We need data to get in touch with you: phone number, alternate number, SIM number, email address, home address.
2.3 Transaction and Session Data. We need data to process your Tala transactions: Tala platform logins, usage, requests, transfers, payments, account numbers.
2.4 Communication and Interaction Data. We collect and process data from your interactions with us and our agents, including SMS, chat messages, emails, call recordings, web form responses, and your participation in surveys, promotional activities, and contests.
2.5 Background Data. Tala will ask about your income, employment, loan purpose, education, device ownership. We may ask you to upload documents to support your financial background. We may also collect data about your financial or transaction history from credit reference bureaus, sanctions lists, and anti-money laundering databases.
2.6 Device Data. Tala will collect information about your device where the Tala App is installed such as: SIM number, IMEI, IP address, device type, operating system, network, settings, SMS keywords, contacts, device or account identifiers, location.
2.7 Third Party Data. Tala is required to verify your identity and keep your profile and information updated. You must keep us informed of changes to your personal data during the existence of your Tala account. Tala may also verify and update your data based on third party sources or publicly available sources.
3.1 Tala platforms – We collect your data when you install and use the Tala platforms. This includes data that you type, upload, or submit in the platform, data about your use of the platform, and data from the device where the platform is accessed.
3.2 Payment and fund transfer channels – We collect data about your Tala transactions (such as payments and fund transfers) from the channels that you use.
3.3 Tala agents – We collect data from your interactions with our agents, including your account service requests through calls, chat, email, message, or web form, and your participation at Tala surveys and events.
3.4 Credit reference bureaus – We may collect data about you from CRB or credit score providers.
3.5 Partners – We may enter into partnerships to allow Tala to offer services to the partner’s clients or users.
3.6 Device – Depending on the Tala platform that you are using and the operating system of your device, Tala may access Device Data once you have given the necessary permissions. For Android devices, you may refer to our Tala app Data Safety page for more information.
If you refuse or fail to provide the necessary data, or if you withdraw your consent for the processing of your data, Tala may be unable to deliver the services to you. We may have to decline your request, with notice to you.
5.1 There are legal obligations that apply to Tala as a Digital Credit Provider.
5.2 Tala will process your data to start, fulfill, or enforce our contract with you.
5.3 Tala may process your data based on our legitimate interest.
5.4 Tala may process your data with your consent.
5.5 Tala may process your data to comply with our role as a data processor, to fulfil our contractual obligations to our partners and to allow our partners to fulfil their contractual obligations to you.
Tala will process your data in electronic form and we use cloud or online storage with servers in South Africa and in the United States. We conduct processing online in different countries where members, staff, and agents of Tala are present, including locations outside of Kenya. We make sure that wherever the processing is done, your data will be protected with adequate safeguards, including encryption in transit and at rest.
You have the following data subject rights:
7.1 Right to be informed. You must be given details, in clear and plain language, about how your data is collected and used, the lawful basis for processing your data, where your data may be transferred or shared, details about automated processing, and your data subject rights.
7.2 Right to access. You may ask for a copy of the personal data that we hold about you, as well as details on how it has been processed and who may have received copies of it.
7.3 Right to object. You may ask us to stop processing your data if our basis for doing so is your consent or our legitimate interest.
7.4 Right to correction. You may ask us to correct or rectify any personal data about you that is not accurate. We may ask you to provide supporting evidence for the request.
7.5 Right to deletion. You may ask us to delete your personal data if it is inaccurate, or the collection or processing was unlawful, or your rights were violated, or if we no longer need it for the purpose for which it was collected, and no other basis can apply. You may request the deletion of your Tala account here.
7.6 Right to data portability. You may ask us to give you a copy of your data in a structured, common, and machine-readable format, or to have it transmitted to another data controller.
7.7 Rights in relation to automated decision making. You have a right not to be subject to a decision based solely on automated processing, including profiling, except when such automated processing or profiling is necessary for the performance of a contract with you, or when it is authorised by law, or when you have given your consent.
8.1 Yes. Here are the uses of automated processing at Tala:
8.2 By expressing your acceptance of Tala’s Privacy Policy, you confirm that automated processing is necessary for Tala to perform its financial services contract with you, and you consent to such automated processing.
8.3 If Tala receives a request from you to reconsider an automated decision, we may evaluate your request and any supporting information or document that you are able to provide. Tala cannot guarantee that the decision will change.
You (or your authorised representative) may send your data subject requests to ke-dpo@tala.co or hellokenya@talamobile.com. Each request is subject to review and evaluation. In some cases, we may ask for supporting documents. If you wish to withdraw your consent from processing or object to the automated processing of your data, Tala may not be able to provide you with our services. We may also close your Tala app account, with notice to you. We may deny your request if we have valid grounds, such as: if we need to comply with a legal obligation; if you have unpaid loans; or if we need to protect the rights of Tala or a third party. We will endeavor to resolve your requests within the time frame allowed under the regulations.
No. Tala’s Services are not intended for children below the age of eighteen (18). We do not knowingly process data relating to children.