1. Who we are
ZPath ("ZPath", "we", "us", or "our") is a free educational guide that helps people learn and use Zcash through Mwende, a bot you chat with on WhatsApp. ZPath is built for Africa, starting in Kenya, and is open to everyone in the world. ZPath is an independent project and is not the Zcash project itself, nor is it affiliated with the Electric Coin Company or the Zcash Foundation.
For any privacy question, you can reach us at info@zpath.africa.
2. Our privacy-first principle
Zcash exists to give people financial privacy. It would make no sense for the guide that teaches it to harvest your data. So we follow a strict principle of data minimisation: we only ask for what is genuinely needed to help you, we never sell your data, and we are non-custodial — we never touch your funds, wallet, seed phrase, or private keys.
3. Information we collect
a. The name you give us
Before opening WhatsApp, ZPath asks for a first name so Mwende can greet you. That name is stored locally in your own browser (using localStorage) so you don't have to type it again, and it is included in the first WhatsApp message you send us (for example, "Hi, I'm Sam. START"). You can clear it at any time by clearing your browser storage.
b. Your WhatsApp messages and number
When you chat with Mwende, we receive the messages you send and the WhatsApp phone number you send them from. We use these only to provide the guide and respond to you. Where we store a reference to your number, we keep it in a hashed (scrambled) form rather than as readable digits wherever practical.
c. Site preferences
Our website may store small, non-identifying preferences (such as your name field above) in your browser's local storage. These never leave your device except as described in (a).
d. Basic technical data
Like most websites, our hosting provider may automatically log standard technical information (such as IP address, browser type, and pages requested) for security and reliability. We do not use this to build advertising profiles of you.
4. How we use information
- To greet you by name and provide the ZPath learning journey through Mwende.
- To answer your questions and improve the guide and lessons.
- To keep the service secure, prevent abuse, and fix problems.
- To comply with the law where we are required to.
5. WhatsApp & third parties
ZPath runs on top of WhatsApp, which is operated by Meta. Your conversations with Mwende travel through WhatsApp and are also subject to WhatsApp's own Privacy Policy. WhatsApp messages are end-to-end encrypted between you and us.
If you choose to buy ZEC, you may use third-party services such as M-Pesa or a cryptocurrency exchange. Those services are independent of ZPath and have their own privacy policies and terms. ZPath does not receive or hold your payment credentials.
6. What we never do
- We never sell, rent, or trade your personal data.
- We never ask for your seed phrase, recovery words, or private keys — and you should never share them with anyone, including anyone claiming to be us.
- We never take custody of your funds.
- We never run third-party advertising trackers to profile you.
7. How long we keep it
We keep information only as long as needed for the purposes above. The name in your browser stays on your device until you clear it. Chat records and support information are kept for as long as needed to provide and improve the service, and then deleted or anonymised. You can ask us to delete your information at any time (see your rights below).
8. Your rights & choices
Depending on where you live, you may have the right to access, correct, delete, or object to our use of your personal information, and to ask for a copy of it. Because we serve people worldwide, we aim to honour these rights — including the standards of Kenya's Data Protection Act, 2019 and, for users in Europe, the GDPR — for everyone.
- Access or deletion: email info@zpath.africa and we'll help.
- Your local name: clear it yourself any time by clearing your browser's site data.
- Stop chatting: simply stop messaging Mwende, or block the number in WhatsApp.
9. Security
We take reasonable technical and organisational measures to protect information, including encryption in transit and limiting who can access data. No system is perfectly secure, but because we deliberately collect so little, there is very little about you for anyone to misuse.
10. Children
ZPath is intended for adults (18+). It deals with money and cryptocurrency and is not directed at children. If you believe a child has provided us information, contact us and we will remove it.
11. International users
ZPath is operated from Kenya and used around the world. By using ZPath, you understand that your information may be processed in Kenya and other countries where we or our service providers operate, which may have different data-protection laws than your own. We apply the safeguards described in this policy regardless of where you are.
12. Changes to this policy
We may update this policy from time to time. When we do, we'll change the "Last updated" date above, and for significant changes we'll make a clearer notice. Continuing to use ZPath after an update means you accept the revised policy.
13. Contact
Questions, requests, or concerns about privacy? Email info@zpath.africa and a human will respond.