Sharing with your circles

Last updated: 16 July 2026

What Sanzra is — and what it is not

Sanzra is a software platform for organising rotating savings circles — known as the sou-sou, pardna, san, susu or esusu — providing group formation, scheduling, record-keeping, reminders, and reputation tools. Sanzra does not hold, receive, transmit or safeguard member funds. All in-app money-movement features are disabled at the platform level; members settle contributions and payouts between themselves outside the platform, and Sanzra keeps the records. Should regulated payment features launch in a market in future, they will do so only under the appropriate licence or licensed partner, and this policy will be updated first.

Information we collect

• Account information: your name, email address, phone number, date of birth, country of residence, and preferred language.
• Identity verification information: images of your government-issued identity document, a selfie, and biometric data derived from these images (face geometry used for liveness detection and face matching). Verification is how savings-circle members can trust that other members are real people.
• Group and activity records: the savings circles you create or join, contribution and payout records, group messages and voice notes you send, and your reliability history (on-time record and streaks).
• Technical and security information: IP address, device and browser information, and security audit logs of significant account actions (sign-ins, verification attempts, settings changes).

How we use information

• To provide the service: running your groups, keeping records, sending reminders and notifications.
• To verify identity and prevent fraud, impersonation and multiple-account abuse within savings circles.
• To screen against applicable international sanctions lists, which we treat as a compliance obligation.
• To secure the platform: detecting suspicious activity and investigating abuse.
• To communicate with you about your account and the service.

We do not sell personal information, and we do not use your information for third-party advertising.

Who we share information with

• Identity verification: verification may use local controls or, only when configured and disclosed for your deployment, Sumsub (Sum and Substance Ltd). Provider availability varies by jurisdiction. Identity documents are not sent to an external verification provider merely because its integration exists in the source code.
• Infrastructure and communications providers: application/database hosting and, when configured, transactional email or messaging providers process data to run the service. The current deployment must identify its active providers and processing locations before accepting members.
• Credit bureaus — only with your explicit consent: Sanzra offers an optional Credit Passport that can report your on-time savings-circle payments to credit bureaus in supported markets. This is off by default, requires your separate opt-in consent, and is not currently active in any market. Nothing is reported without that consent.
• Legal requirements: we may disclose information where required by law or lawful authority.

Biometric data and retention

Biometric verification data (identity-document images, selfies, and derived face data) is used only for identity verification and account security — never for advertising or profiling. We apply retention limits to verification imagery and run automated purges of expired biometric samples. Account, group and audit records are kept for as long as your account exists and thereafter as needed to meet legal, security and dispute-resolution obligations.

Cookies and similar technologies

Sanzra sets exactly three cookies, all essential to operating the service. We set no advertising, analytics, tracking, or third-party cookies of any kind.

• sanzra-session — keeps you signed in. It is encrypted, inaccessible to scripts (HttpOnly), sent only over HTTPS in production, and expires automatically after at most 7 days, after which you must sign in again.
• sanzra_locale — remembers your language choice so pages render in your preferred language. It stores only the language code (for example "en" or "es") and lasts up to one year. We may keep a copy of the same preference in your browser’s local storage for the same purpose.
• sanzra_join_code — remembers the group invite code you arrived with for up to 14 days, so signing up or completing verification does not lose your invitation. It stores only the invite code and is cleared when you join.

Because both cookies are strictly necessary for the service to function, Sanzra does not show a cookie consent banner. If we ever introduce cookies that are not strictly necessary, we will update this policy and ask for your consent first.

Security

Sensitive fields are encrypted at rest, all traffic is encrypted in transit, access is role-restricted and audit-logged, and significant account actions require step-up verification. No system is perfectly secure, but security is engineered into the platform rather than added afterwards.

Your rights and choices

• You can access and correct your account information in Settings.
• You can delete your account from Settings; deletion is followed by an automated purge of your personal data, subject to records we must keep by law.
• You can grant or revoke the optional credit-bureau consent at any time; revocation stops any future reporting.
• You can contact us about any privacy question or request at privacy@sanzra.com.

International transfers

Infrastructure or verification providers may process data outside your country, including in the United States or European Economic Area. A deployment must document the active destination, processor, and legally required transfer safeguard before serving residents whose data will be transferred. This policy alone is not an international-transfer mechanism.

Age requirement

Sanzra is for adults. You must be at least 21 years old to create an account — the age the platform enforces at sign-up — and we do not knowingly collect information from anyone under that age.

Changes to this policy

When this policy changes materially, we will update the date above and notify you in the app before the change takes effect. This policy is provided in English; where translations are offered, the English version governs.

You can contact us about any privacy question or request at privacy@sanzra.com