Groups break up over money that goes missing and records nobody can check. ChamaBook is designed so that can't happen quietly: every shilling is on a record nobody can rewrite, and no single person can move money alone.
ChamaBook doesn't hold or move funds on its own. Contributions go to your group's own Paybill, till or bank account. ChamaBook records them, and sends M-PESA payouts from your shortcode only after your officials approve.
Every entry is double-entry and balanced. Entries can't be edited or deleted, by the group or by us: the database itself refuses. Mistakes are corrected with a reversing entry that everyone can see. Each entry is sealed to the one before it with a cryptographic hash, and the chain is checked every night.
Your group decides how many officials approve loans, withdrawals and payouts. A person can never approve money going to themselves, and every approval is confirmed with a fresh one-time code.
Officials sign in with an authenticator app such as Google Authenticator or Microsoft Authenticator, and keep recovery codes for a lost phone. Members can use an app or receive codes by SMS or email. Sign-in codes are only sent where they will arrive, and where a SIM-swap check is connected, a recently swapped SIM can't receive an official's code.
ID and passport numbers, dates of birth, KRA PINs, addresses, next of kin and identity documents are encrypted in the database. Documents can be opened only by the people who review them, and every view is logged.
Consent is recorded when members submit identity details. Members can see, download, correct or ask to erase their data from their profile. Identity documents are deleted automatically when the retention period ends. Your group is the data controller for its members; Oppi Technologies Limited processes data on its behalf. Read the privacy notice.
Every recording, approval, change and sign-in is logged with the person, time, address and device. Your auditor can read the whole trail.
Every file is scanned for viruses and rebuilt before it's kept, removing hidden content. All connections use HTTPS, sessions expire quickly, and the system is reviewed against OWASP's application and API security standards.
Please tell us privately at [email protected] with the details and steps to reproduce it. We'll reply within two working days and keep you updated while we fix it. Please don't access other people's data or disrupt the service while testing.