Legal
Privacy Policy
Last updated 28 October 2026
Tweeps Creatives ("Tweeps", "we", "us") operates Tweeps Pass. This page explains what we collect when you host or attend an event through the platform, why, and the rights you have over it under Kenya's Data Protection Act, 2019.
What we collect
- Phone numbers — for host sign-in (OTP), guest RSVPs, gift and ticket payments, and SMS reminders.
- Names — yours as a host, and the name you give when you RSVP, gift, or buy a ticket.
- Event details — the event name, date, venue, and category you or the host set.
- Event page views — a random browser identifier is stored in your browser and used to count one unique view per event. We do not use your IP address or email address for this count.
- Photos — anything you or a guest uploads to an event's moments page.
- Payment metadata — M-Pesa transaction references (receipt numbers, amounts, phone numbers) passed to us by Safaricom when a gift or ticket payment completes. We never see or store your M-Pesa PIN — that stays between you and Safaricom.
Why we collect it
Strictly to run the service: signing you in, confirming your RSVP, processing a gift or ticket payment, generating your QR gate pass, sending the reminders a host asks us to send, and displaying the moments gallery. We don't sell personal data, and we don't use it for advertising.
M-Pesa and Safaricom
Gift and ticket payments are processed through Safaricom's M-Pesa Daraja platform. When you complete a payment, Safaricom shares the transaction outcome (amount, receipt number, phone number) with us so we can confirm your gift or ticket and credit the host correctly. Safaricom's own privacy practices govern how they handle your M-Pesa account and PIN.
How long we keep it
An event's guest list, gift log, and photo gallery stay live for the access window tied to the host's tier (shown on the event page). After that window, the data is no longer publicly displayed; core records may be retained longer where needed for financial reconciliation (e.g. payout history) or legal compliance. You can ask us to delete personal data that isn't needed for those purposes — see "Your rights" below.
Who we share it with
Safaricom (M-Pesa processing), our SMS delivery provider (sending OTPs, invites, and reminders on a host's behalf), and — only for the specific event you're part of — the host, who can see their own guest list, gifts, and photos. We don't share your data with other hosts or with third parties for marketing.
Your rights
Under the Data Protection Act, 2019, you can ask to see what we hold about you, correct it if it's wrong, or ask us to delete it where we're not required to keep it (e.g. for financial records). To make a request, contact us through the details on your host dashboard, or via the vendor application form on this site.
Changes
We'll update this page if what we collect or why changes, with a new date at the top.