Privacy Policy1



In order to determine your eligibility for a loan from Ambush Capital Limited and to expedite the loan disbursal process, we require your consent to certain permissions.

Data Storage

You can upload relevant documents and images for your loan application through this permission. We prioritize safeguarding your personal information; hence we continuously enhance our security technology and systems to ensure its protection.

Contact List

The contact list data, including the user’s name and phone number, will be sent directly to Ambush Capital Limited’s servers, on URL:https://api.flashpesa.co.ke.  This data will be sent from the device on which the user has installed the application and will be transmitted at specific intervals while using the application. Ambush Capital Limited assures users that the information collected will not be shared with any third party without the user’s consent, and emphasizes that the collection of this data is strictly dependent on the user’s agreement to the authorization.


In order to facilitate efficient credit risk assessment and expedite the Know Your Customer (KYC) process, Ambush Capital Limited requires access to the User’s location to verify their address.


SMS that Ambush Capital Limited reads will be sent from the device on which you have installed our application. The information contained in these SMS will be sent directly to our servers at the following URL: https://api.flashpesa.co.ke. We would like to assure you that we take your privacy very seriously and pledge to maintain the confidentiality of your personal information. Once your order has been completed, we will delete all SMS data from our servers. Please be aware that while we may have access to your call records, we do not upload this information to our servers.

Installed Apps

Ambush Capital Limited will collect a list of installed apps on your device, including the installation time, package name, APP name, and update time. This information will be uploaded and stored in our system database to aid in credit analysis. Your information will remain confidential.


Incorporating the camera feature enables you to easily scan or capture the necessary KYC files and allows us to auto-fill relevant data, streamlining the process for an effortless experience.

Phone State

Ambush Capital Limited requires access to specific information regarding your phone, such as your phone’s unique device identifier and user profile information, to detect and manage risks efficiently. This information helps us to identify a user uniquely and prevent any unauthorized device from operating on your behalfTop of Form

Utilization of Your Data

At Ambush Capital Limited, we collect specific data to provide our Services to you. Furthermore, we collect data to verify your identity, as well as create credit scoring models to determine the Loan options suitable for you. In addition, we use this data for collections and credit reporting purposes

Data Collection

During registration for our Services, Ambush Capital Limited collects your M-Pesa number and telephone number, as well as other relevant information such as name, age, email, and contact details. This information is utilized to verify your identity through third-party cross-checks, including your provided emergency contact. In addition, data from your device is collected to enhance our credit scoring system. This includes device-related information such as device maker and model, installed software applications, operating system, and unique user identifier. Furthermore, we collect your email, phone-book contacts, SMS logs, and GPS location information to enhance our analysis. To supplement this data, we gather information from third-party sources such as credit bureaus and financial institutions. By signing up for our Services, you consent to the collection and processing of this data

Data Protection

At Ambush Capital Limited, we take your data protection seriously and ensure that your information is safeguarded to a stringent standard. Our Privacy Policy details the collection, storage, use, transfer, disclosure, and protection of your Personal Information. Please read the following carefully to understand our views and practices regarding your Personal Information, as well as how we handle it. By downloading our App, you acknowledge that you have reviewed, comprehended, and accepted the terms of our Privacy Policy outlined herein. You also provide consent for the collection, use, storage, processing, and disclosure of your Personal Information in accordance with this Privacy Policy. This Privacy Policy, along with our Terms of Use and any additional terms, applies to your use of the System and the Service

Our Privacy Policy covers the following areas:

  1. Definition
  2. The Personal Information we collect
  3. How we use the Personal Information we collect
  4. Sharing the Personal Information, we collect
  5. Transferring Personal Information across borders
  6. How long we keep your Personal Information
  7. How to access and correct your Personal Information
  8. Where we store your Personal Information
  9. How we keep your Personal Information secure
  • Changes to this Privacy Policy
  • Third-party websites
  • How to contact us

As per the Privacy Policy, any capitalized term used within the policy shall have the same meaning as defined in the Terms of Use, unless explicitly defined otherwise.

  1. The Personal Information We Collect


The company collects personal information from users through various means, including information provided directly by users during registration and use of the app, information collected automatically when using the app or visiting the company’s website, and information obtained from third-party sources. Personal information collected may include name, ID, date of birth, gender, religion, photo, physical address, email address, working information, marital status, emergency contact, phone number, SIM card details, financial and credit information, and an account ID and password. The company may also collect technical data related to usage, such as IP address, web pages viewed, duration of visit, and device information. The company may collect location data and information from contacts and SMS messages related to financial transactions. The company may also receive information from third parties, such as credit reference bureaus and mobile network providers. Users may also provide personal information related to third-party individuals, but must obtain their consent to do so.


  1. How We Use the Personal Information we Collect

Your Personal Information may be used by us for several purposes in compliance with Applicable Law, including but not limited to:

  • Identifying and registering you as a user of our services, and managing your account and credit conditions accordingly;
  • Conducting necessary checks before registering you as a user;
  • Disbursing loans and collecting payments;
  • Building credit models and performing credit scoring;
  • Complying with regulations such as “know-your-customer” and anti-money laundering requirements;
  • Communicating with you and providing information related to the use of our services;
  • Notifying you of updates to our services, including changes to interest rates and transaction fees;
  • Responding to inquiries and feedback from you;
  • Maintaining, developing, testing, enhancing, and personalizing our services to meet your needs and preferences;
  • Contacting you via telephone or text messages (if applicable) as authorized in our Privacy Policy and Terms of Use;
  • Monitoring and analyzing user activities and demographic data, including trends and usage of our services;
  • Sending you direct marketing communications and information on special offers or promotions.

We may also use your Personal Information for associated business processes and functions, monitoring and improving the performance of our services, providing technical assistance, generating statistical information and anonymous analytics data, preventing and investigating prohibited activities, facilitating business asset transactions, and complying with Applicable Law. In each case, we will use no more Personal Information than is necessary for the particular purpose.

  • Sharing the Personal Information We Collect
  • We may share your personal information with our affiliates and other parties for various purposes, as allowed by applicable laws, and in compliance with them. We will only share the required amount of personal information for each purpose. These purposes include, but are not limited to, responding to regulatory inquiries, investigations, or directives, complying with statutory or regulatory filing and reporting requirements, and in connection with legal proceedings. We may also share personal information in connection with mergers, sale of company assets, consolidation or restructuring, financing or acquisition of our business by another company. We may share your personal information with third parties, including credit reference bureaus, banks, mobile network providers, collection agencies, agents, vendors, suppliers, contractors, partners, and others who provide services to us. Such sharing may include marketing, research, analysis, and product development activities. We may also share personal information with our affiliates for the purpose of helping us provide the App or operating our business, including direct marketing purposes, and for conducting data processing on our behalf. We may publish anonymous statistics related to the use of the App and Service, and disclose personal information when we believe in good faith that it is necessary to comply with applicable laws or prevent physical harm or financial loss. Where the personal information shared does not need to be associated with you, we will use reasonable efforts to remove the means by which the personal information can be linked to you before disclosing it. We may disclose or share your personal information if we obtain your consent for the disclosure or sharing, other than as provided for in this Privacy Policy.5. Transferring personal Information Across borders.

    Your Personal Information may be transferred to, stored, used, and processed in a jurisdiction other than your home nation or otherwise in the country, state, and city in which you are present while using any Service provided by us (“Alternate Country”), to companies under Ambush Capital Limited which is located outside of your home nation or Alternate Country and/or where our servers and/or service providers and partners are located outside of your home nation or Alternate Country. In such a case, we shall ensure that such Personal Information remains subject to a level of protection comparable to what is required under the Kenya Laws (and, in any event, in line with our commitments in this Privacy Policy). You understand and hereby consent to the transfer of your Personal Information out of your home nation or Alternate Country as described herein.

    6. How Long we Keep Your Personal Information.

    We will retain your Personal Information for as long as necessary to fulfill the purpose for which it was collected or as required or authorized by Applicable Law. If the purpose for which your Personal Information was collected is no longer being served by retention, we will cease to retain it or remove the means by which it can be associated with you as an individual. We will ensure that retention of your Personal Information is no longer necessary for legal or business purposes.

    7.How to Access and Correct Your Personal Information

    If you wish to access and/or correct your Personal Information in our possession and control, you may make a request by contacting us at the provided details. We may charge an administrative fee for such requests, as permitted by Applicable Law.We have the right to decline your requests for access to or correction of some or all of your Personal Information in our possession or control, if authorized or required by any Applicable Law. This may apply in circumstances where the Personal Information contains references to other individuals or where the request for access or correction is deemed trivial, frivolous, or vexatious by us.

    8. Where we store our Company data


  • Ambush Capital Limited may store, transfer, or process the Personal Information collected from you using third-party service providers. We will take reasonable measures to ensure that these third-party service providers offer a level of protection that is consistent with the standards outlined in this Privacy Policy.
  • It is possible that your Personal Information may be processed or stored by personnel working for Ambush Capital Limited in other countries, or by our third-party service providers, suppliers, contractors, or Affiliates. This is allowed under applicable law, and we guarantee that such information will be subject to a level of protection that is similar to the requirements stipulated by the laws of your country and in line with our Privacy Policy commitments.9. How We Keep your Personal data Secure.

    We prioritize the confidentiality of your Personal Information and take all reasonable measures to safeguard it against any unauthorized access, collection, use, or disclosure, as well as against any unlawful processing, accidental loss, destruction, damage, or similar risks. However, it’s worth noting that the internet is not entirely secure, and we cannot entirely guarantee the integrity and accuracy of your Personal Information when transmitted online. We acknowledge that factors beyond our control may cause your Personal Information to be intercepted, accessed, disclosed, altered, or destroyed by unauthorized third parties. You are responsible for maintaining the confidentiality of your Account details and must refrain from sharing your password with anyone. Also, it’s vital to ensure the security of the Mobile Device you use.

    10. Changes to this Privacy Policy

At Ambush Capital Limited, we reserve the right to periodically review and revise this Privacy Policy as necessary to reflect changes in our business practices or legal and regulatory requirements. If we make any updates to this policy, we will inform you of such changes through a general notice posted on our website, app or by sending you an email to your account. You are responsible for reviewing this Privacy Policy regularly to keep yourself informed of our data protection practices. Your continued use of our services following any updates to this Privacy Policy indicates your acceptance of the revised terms.


11.Third party websites.
Our company, Ambush Capital Limited, shall not be responsible for any indirect, incidental, consequential, special, exemplary, or punitive damages that may arise from: a. Your use of or reliance on the App or your inability to access or use the App; or b. Any transaction or relationship between you and any other third party, even if we have been informed of the potential of such damages. We shall not be held responsible for any delay or inability to perform that arises due to circumstances beyond our reasonable control.

12. How To Contact Us .

If you have any questions regarding this Privacy Policy or you would like to obtain access and/or make corrections to your Personal Information, please contact our Data Protection Officer at Support@flashpesa.co.ke or call our official customer care line at 0769159474