How We Protect You

The connection

Every page is served over HTTPS with a valid certificate, so what you send us is encrypted on the way. Your browser will show a padlock throughout, including at login and payment.

Reach a version without that padlock, or on a domain that is nearly but not quite ours, and you should close it. Our only address is genuinesugarmummies.co.ke.

Accounts

• Administrative access is restricted to the accounts that need it.
• Admin logins require two-factor authentication.
• Repeated failed logins are blocked automatically at server level.
• Access to member records is logged.

Installing the GS App safely

The GS App is distributed as a direct download from this site, not through an app store. Android will warn you before installing it. That warning is normal for apps outside the Play Store, but it also means you have to be careful where the file comes from.

• Only download from our own download page.
• Check the address bar reads genuinesugarmummies.co.ke before tapping.
• Turn “install from unknown sources” back off afterwards.
• An APK sent to you on WhatsApp or Telegram did not come from us.

Payments

Payments run through M-Pesa, Airtel Money and Telkom using their own systems. Your PIN is entered on your phone, never on our site, and we never see or store it.

We confirm payment from the transaction ID you send. The official numbers are on the Payment Instructions page, check any number against that page before sending anything.

What we will never do

• Ask for your password or M-Pesa PIN
• Ask you to pay a personal number not on our payment page
• Contact you from a personal social account demanding money
• Threaten to expose you unless you pay

Any of those means someone is impersonating us. Report it here.

Your side of it

• Use a password you use nowhere else.
• Never share a verification code, including with anyone claiming to be staff.
• Keep first meetings public. See Safety Tips.
• Be wary of anyone avoiding verification or rushing you off-platform.