Terms and Conditions

• Wemaflows / Platform, the website, mobile interface, and services operated by PitchKambi Limited under the brand Wemaflows.
• Mfadhili, a registered user who purchases goods for a Jirani.
• Jirani, a person registered on the platform to receive goods.
• Kituo, a verified local vendor registered to fulfil orders.
• Pickup code, the unique 5-character code assigned to a Jirani.
• Purchase / order, a prepaid transaction for goods at a Kituo on behalf of a Jirani.

• You must be at least 18 years old to register as a Mfadhili or Kituo.
• You must provide accurate and truthful information at registration.
• You must not create more than one account.
• Wemaflows reserves the right to suspend or terminate accounts that violate these Terms.

• Mfadhilis may browse Jirani profiles and make purchases on their behalf.
• Each Mfadhili may introduce up to 3 Jiranis (extendable by admin).
• By introducing a Jirani, the Mfadhili vouches for that person's identity and need.
• Mfadhilis are responsible for the accuracy of information provided when introducing a Jirani.
• A Mfadhili who introduces a fraudulent Jirani may have their account suspended.
• Payments are final once M-Pesa confirmation is received, subject to the refund policy in Section 9.

• Jiranis are registered on the platform by Mfadhilis or admin and do not require their own account.
• Jiranis are assigned a unique pickup code and may collect goods at their assigned Kituo.
• Jiranis' personal information is handled with maximum privacy protection (see Section 12).
• Jiranis' profiles show only a first name, general area, and dignity story, no other identifying information is publicly visible.
• Wemaflows does not guarantee a continuous supply of goods. Collection is subject to available purchases by Mfadhilis.

• Kituos must register with accurate business information and submit required documents.
• Chemists must hold a valid Kenya Pharmacy and Poisons Board (PPB) licence and a county government business permit, both are verified before approval.
• Food Kituos must submit a valid business permit or national identity document.
• Kituos receive M-Pesa payment for goods upon confirmed collection, this is payment for a completed retail sale, not a commission or charity payment.
• Kituos must confirm collections accurately using the OTP and photo confirmation system.
• False confirmations (confirming a collection that did not occur) constitute fraud and will result in immediate suspension, recovery of any payments made, and referral to relevant authorities.
• Kituos are responsible for maintaining accurate stock and flagging out-of-stock items promptly.

• All payments are processed via M-Pesa through the Daraja API.
• Payment is held as a prepaid sale until collection is confirmed by the Kituo.
• Funds are released to the Kituo's M-Pesa till upon OTP-verified, photo-confirmed collection.
• Wemaflows does not store raw payment card data. M-Pesa references are stored for record-keeping per Kenya Revenue Authority (KRA) requirements.
• Transaction receipts are issued automatically and retained for 7 years (KRA requirement).
• Wemaflows may deduct a platform service fee (disclosed at checkout) from the purchase amount.

• If a Jirani does not collect within 30 days, the order expires and a full refund is issued to the Mfadhili's M-Pesa.
• Partial refunds apply where a Kituo marks specific items as out of stock.
• Refunds are processed within 3–5 business days via M-Pesa.
• Refunds are not available after confirmed collection.
• Disputes may be raised within 14 days of collection confirmation.

You may not:

• Create fake Jirani profiles or vouch for people you do not personally know.
• Falsely confirm collections as a Kituo.
• Use the platform to launder money or conduct fraudulent transactions.
• Harvest, scrape, or systematically access platform data.
• Attempt to circumvent the anonymisation or privacy protections on Jirani profiles.
• Use the platform for any purpose other than its stated purpose.

Violations may result in immediate account termination, recovery of funds, and referral to the relevant Kenyan authorities including the DCI.

To protect users, vendors, and the integrity of the platform, the following identity, fraud prevention, content moderation, and enforcement controls form part of these Terms. By using Wemaflows you agree to be bound by them.

16.1 User Identity Controls

Username restrictions. Users may not change their usernames after account creation. Usernames remain permanently linked to historical transactions, activities, audit logs, and compliance records. Modification requests require formal administrative review and approval.

Email address restrictions. Users may not change their registered email addresses through the dashboard. Email addresses are unique identity credentials permanently linked to user records, transactions, compliance reports, and audit trails. Changes may only be performed by authorised administrators after successful identity verification.

Phone number restrictions. Each phone number must be unique across the platform and may only be associated with one active account. Duplicate phone numbers are automatically rejected during registration. Users may not modify phone numbers directly through the dashboard; changes require a formal request, identity verification, administrative approval, and an audit log entry.

16.2 Fraud Detection and Risk Monitoring

The platform continuously monitors and detects potential fraudulent activity through automated risk engines.

Identity fraud. The system flags duplicate or impersonating usernames, duplicate or disposable email addresses, multiple accounts linked to one phone, device or IP, synthetic identity patterns, and mismatches across verification documents.

Financial fraud. The system monitors unusual transaction patterns, rapid account creation followed by financial activity, suspicious withdrawal requests, circular payment behaviour, money-laundering indicators, abnormal refund activity, high-risk payment methods, repeated failed payment attempts, chargeback abuse, and account-takeover indicators.

Vendor fraud. The platform investigates vendors accepting payments without fulfilling orders, failing to issue medicine after payment confirmation, failing to deliver food orders, repeated customer complaints, excessive cancellation rates, fraudulent inventory listings, expired or unauthorised medicines, counterfeit products, manipulated reviews or ratings, and pricing or billing irregularities.

Operational fraud. The platform flags fake business registrations, fraudulent pharmacy or food vendor licences, unauthorised seller accounts, location or device spoofing, VPN abuse associated with fraud patterns, bulk account creation, credential-stuffing attacks, and automated bot registrations.

Risk scoring. Every user and vendor account receives a dynamic risk score based on identity verification status, transaction behaviour, complaint history, device reputation, geographical risk indicators, vendor fulfilment performance, and regulatory compliance history. Accounts exceeding defined risk thresholds are automatically escalated for review.

16.3 Content Moderation and User Conduct

Profile images. Uploaded profile images are automatically scanned for nudity, pornographic or sexually explicit content, graphic violence, hate symbols, criminal or extremist imagery, illegal content, child exploitation content, and offensive or abusive imagery.

Usernames. The platform detects and blocks offensive usernames, hate speech, profanity, harassment, threatening language, sexual content, impersonation attempts, fraudulent brand impersonation, and criminal references.

User-generated content. All user-generated content is continuously monitored for abuse, harassment, threats, hate speech, explicit content, fraud or scam attempts, illegal activities, and misinformation impacting health or safety.

16.4 Automated Enforcement

Immediate suspension. The system automatically suspends an account when explicit profile images are detected, illegal content is uploaded, severe abuse is identified, fraud indicators exceed critical thresholds, vendor fraud is strongly suspected, or identity manipulation is detected. Upon suspension, user access is disabled, transactions are frozen where legally permissible, administrative alerts are generated immediately, and evidence is preserved for investigation.

Administrative review. Administrators review content violations, fraud investigations, identity disputes, vendor misconduct cases, and repeat offender activity. All actions are recorded in immutable audit logs.

Permanent ban. Accounts are permanently banned where investigations confirm fraudulent activity, identity theft, vendor scams, repeated policy violations, illegal content uploads, distribution of explicit or prohibited content, abuse of customers or vendors, or platform manipulation. Permanently banned users lose account access permanently, are prevented from creating new accounts, have associated phone numbers, emails, devices, and identifiers blacklisted, and are reported to relevant authorities where legally required.

16.5 Audit, Compliance and Governance

• All identity changes, fraud alerts, suspensions, reviews, and bans are recorded in tamper-resistant audit logs.
• All administrative actions are traceable to specific administrators.
• Compliance reports are available for regulatory review.
• Fraud detection systems operate continuously and in real time.
• The platform maintains a zero-tolerance policy toward fraud, illegal content, and vendor misconduct.