OneStack · Last updated: 18 July 2026
OneStack (formerly Mkoba) is a chama management platform operated by Riverbank Solutions. It helps savings groups manage members, contributions, rotations, table banking loans and payouts through our mobile app and web portal.
This policy explains what information we collect, why we collect it, and the choices you have. It applies to the OneStack mobile app, the web portal, and related services.
Account information: your name, phone number and email address when you register.
Chama information: group names, membership lists, roles, contribution schedules, rotation positions, loan records and related group settings that you or your chama admins enter.
Payment and transaction information: contribution and payout amounts, M-Pesa or bank transaction references and confirmations, and the mobile money phone number used to pay or receive funds. We do not collect or store your M-Pesa PIN or bank passwords.
Device and usage information: device type, app version, and technical logs (such as crash reports and API request records) used to keep the service secure and reliable.
To operate your chama: recording contributions, tracking rotations and loans, calculating balances, and disbursing payouts to the correct member.
To process payments through licensed payment providers (such as Safaricom M-Pesa and partner banks) that your chama has configured.
To send service notifications: payment confirmations, contribution reminders, payout alerts and security verifications (such as one-time codes).
To keep the service safe: preventing fraud, enforcing role-based access (for example, only chama admins can initiate payouts), and auditing money movements.
With your chama: members of your group can see the group records that the group’s settings allow, such as contribution status, rotation positions and payout history.
With payment providers: the details needed to complete a transaction (such as your phone number and the amount) are shared with the payment provider your chama uses.
With service providers that host our infrastructure and deliver notifications, under agreements that restrict their use of your data.
When required by law: we may disclose information to comply with a legal obligation or lawful request by public authorities.
We do not sell your personal information.
Data is encrypted in transit. Access to production systems is restricted and role-based. Sensitive payment operations require additional verification (such as emailed one-time codes) before they execute.
We keep account and transaction records for as long as your account is active and as required for financial record-keeping. Because chama records are shared group records, some information (such as contributions you made to a group) remains part of the group’s history even if you leave the group.
You can review and update your profile information in the app. You may request a copy of your personal data or ask us to delete your account by contacting us; we will honour deletion requests except where records must be retained for legal or financial audit reasons.
OneStack is intended for adults managing group savings and is not directed at children under 18.
If we make material changes to this policy we will update this page and, where appropriate, notify you in the app.
Questions or requests about your data: info.neuralforge@gmail.com