Usalama na uaminifu
Security and trust
Kile mfumo huu unachofanya hasa.
What this system actually does.
Ukurasa huu hausemi “pesa yako iko salama” na kuishia hapo. Unaeleza taratibu zilizopo kwenye msimbo, na unataja waziwazi kile ambacho hakipo. Kila kitu kilichoandikwa hapa kinaweza kuthibitishwa kwenye msimbo wa mfumo huu.
This page does not say “your money is safe” and stop there. It describes the mechanisms that exist in the code, and names plainly the ones that do not. Everything written here can be checked against this system's source.
Leja: kitabu kinachojikagua chenyeweThe ledger: a book that checks itself
Kila muamala umefungwa kwa alama ya kidijitali inayotokana na maudhui yake na alama iliyotangulia. Ndiyo maana hakuna mstari unaoweza kubadilishwa peke yake.
Every transaction is sealed with a fingerprint computed from its own contents and from the one before it. That is why no single line can be changed on its own.
-
Muamala wa kwanzaThe first transaction
Pande mbili zinazolingana: kinachotoka mahali fulani kinaingia mahali pengine. Jumla yake ni sifuri.Two matching sides: what leaves one place enters another. They total zero.
Alama yakeIts fingerprint
-
Muamala wa piliThe second transaction
Alama yake inahesabiwa kutoka maudhui yake na kutoka alama ya muamala uliotangulia.Its fingerprint is computed from its own contents and from the fingerprint before it.
Alama yakeIts fingerprint
-
Muamala wa tatuThe third transaction
Badilisha mstari wa kwanza, na alama hii na kila iliyokuja baada yake hazilingani tena.Change the first line, and this fingerprint and every one since no longer match.
Alama yakeIts fingerprint
Kuingiza mara mbili, kwa namba nzima
Double entry, in whole integers
Kila muamala unaandikwa pande mbili zinazolingana: kinachotoka mahali fulani kinaingia mahali pengine, na jumla yake ni sifuri kila mara. Salio halijawahi kuandikwa moja kwa moja; linatokana na miamala. Kiasi chochote ni namba nzima ya milioni moja ya dola. Hakuna namba ya desimali inayoelea popote kwenye njia ya pesa, kwa sababu namba za aina hiyo hupoteza senti kimya kimya.
Every transaction is written on two sides that match: what leaves one place enters another, and the total is always zero. A balance is never written directly; it is derived from the postings. Every amount is a whole number of millionths of a dollar. There is no floating point anywhere on the money path, because that kind of number loses cents quietly.
Mnyororo wa hash
A hash chain
Kila muamala una alama ya kidijitali inayotokana na maudhui yake na alama ya muamala uliotangulia. Mtu akibadilisha mstari wa mwezi uliopita, alama yake haitalingana tena, na wala alama za kila muamala uliokuja baada yake. Huwezi kuhariri historia kimya kimya.
Every transaction carries a digital fingerprint computed from its own contents and from the fingerprint of the transaction before it. Change a line from last month and its fingerprint no longer matches, and neither does that of every transaction since. History cannot be edited quietly.
Ukaguzi unaoendelea, na kigandisho
The continuous check, and the freeze
Mfumo unahesabu upya kila kitu leja inachodai, kutoka mwanzo: kila salio lililohifadhiwa dhidi ya jumla ya miamala yake, kila muamala kama unalingana hadi sifuri, alama yake ya kidijitali, na kiungo chake kwenye mnyororo.
The system recomputes everything the ledger claims, from first principles: every cached balance against the sum of its postings, every transaction for whether it balances to zero, its own fingerprint, and its link in the chain.
Ukaguzi ukikuta leja inajikanusha, utoaji wote wa pesa unagandishwa mara moja kwa kila mtumiaji. Kigandisho hicho kinafanya kazi kabla ombi lolote halijasomwa kwa undani, kabla ya kuingia kwa akaunti, hivyo hakuna njia ya kuizunguka. Salio lako linabaki pale lilipo na unaweza kuliona; kinachozuiliwa ni kutoka.
If that check ever finds the ledger disagreeing with itself, all withdrawals freeze immediately, for every customer. The freeze runs before a request is even parsed, before any sign-in is read, so there is no path around it. Your balance stays where it is and you can still see it; what is stopped is value leaving.
Ukaguzi safi unaofuata haufungui kigandisho. Mtu wa ofisi pekee ndiye anayeweza kukiondoa, baada ya kuchunguza. Mfumo unaojifungua wenyewe ni mfumo usio na kigandisho.
A later clean run does not lift the freeze. Only a human operator can, after investigating. A freeze that clears itself is not a freeze.
Uhaba wa fedha kwenye hazina unaweza pia kusababisha kigandisho hicho hicho. Ujumbe unaokupa sababu halisi, si sentensi moja isiyobadilika, kwa sababu kutaja sababu isiyo sahihi ni kutaja jambo lisilotokea.
A treasury coverage shortfall can raise the same freeze. The message you get names the actual reason rather than one fixed sentence, because naming the wrong one is naming something that did not happen.
Na hapa ndipo mnyororo unapoishia: yasiyo kweli kutuhusu
And here is where the chain stops: what is not true of us
Taratibu zote hapo juu ni za kweli na zinafanya kazi leo. Hazibadilishi hata moja kati ya haya matano.
Every mechanism above is real and works today. Not one of them changes any of these five.
Hatuna leseni ya benki, ya taasisi ya fedha, wala ya mtoa huduma za malipo.
We hold no banking, financial institution or payment service provider licence.
Hakuna bima ya amana. Hakuna mfuko wa fidia.
There is no deposit insurance. There is no compensation scheme.
Hatujakaguliwa na mkaguzi wa hesabu wa nje wala kampuni ya usalama wa mifumo.
We have not been audited by an external accountant or a security firm.
Hatujachapisha uthibitisho wa akiba unaoweza kukaguliwa na mtu wa nje.
We have not published a proof of reserves that an outsider can verify.
Hatuna washirika waliotia saini wala wawekezaji wa kutaja.
We have no signed partners or investors to name.
Orodha hii itafupishwa pale mambo yatakapobadilika, si kabla. Hali halisi ya kila kipande, mstari kwa mstari.
This list will get shorter when the facts change, and not before. Where every piece actually stands, line by line.
Pesa haipotei katikatiMoney is never lost in the middle
Akaunti ya kushikilia. Pesa inayotoka inahamishiwa kwanza kwenye akaunti ya kushikilia: imetoka kwenye salio lako, lakini bado haijaondoka jengoni. Kama mtoa huduma ameshindwa, kila senti inarudi kwako. Hakuna hali inayoruhusu kiasi kupotea katikati.
A suspense account. Money on its way out moves first into a suspense account: out of your balance, but not yet out of the building. If the provider fails, every unit comes back to you. There is no state in which an amount goes missing in between.
Hailipi mara mbili. Ujumbe wa mtoa huduma ukirudiwa (jambo la kawaida kabisa), kumbukumbu yake inatambulika na hakuna anayelipwa mara ya pili. Kuna kufuli tatu kwenye mlango huo huo: kumbukumbu ya mtoa huduma, ufunguo wa kitendo chenyewe, na leja yenyewe inayokataa kuandika kitu kilekile mara mbili.
It never pays twice. When a provider's callback is replayed, which is entirely normal, its reference is recognised and nobody is paid a second time. There are three locks on that one door: the provider's own reference, the operation's key, and the ledger itself refusing to write the same posting twice.
Pesa isiyojulikana mwenyewe haitupwi. Malipo yanayoingia bila kutambulika yanawekwa pembeni na ushahidi wake, na mtu anaarifiwa. Mbadala wake ni mteja aliyeona shilingi zake zikitoka M-Pesa na kutofika popote.
Money we cannot attribute is never dropped. An inbound payment we cannot match to a wallet is parked with the provider's evidence and a human is paged. The alternative is a customer whose shillings left M-Pesa and arrived nowhere.
Kiasi kisicholingana hakikisiwi. Ukithibitisha kiasi tofauti na kile ombi lilivyoomba, hatuwezi kubahatisha. Kinawekwa pembeni na mtu anakiangalia.
A mismatched amount is never guessed. If what you actually paid differs from what the prompt asked for, we do not guess. It is parked and a human looks at it.
Akaunti yakoYour account
PIN inaidhinisha, si kuingia
The PIN authorises, not the login
Kuingia kwenye pochi hakukupi ruhusa ya kutumia pesa. PIN yako inaombwa kwa kila kitendo cha pesa, kwenye kila njia, kila mara: app, wavuti, WhatsApp na USSD.
Being signed in does not authorise spending. Your PIN is asked for on every money action, on every channel, every time: app, web, WhatsApp and USSD.
Vipindi unavyoweza kuvizima
Sessions you can kill
Kipindi ni safu kwenye jedwali, si madai yaliyofungwa ndani ya tokeni. Ukibonyeza “toka kila mahali”, ombi linalofuata kutoka kwenye simu iliyoibiwa linakataliwa mara moja, badala ya kubaki likifanya kazi mpaka tokeni iishe. Kipindi kinaisha baada ya siku 30 kwa vyovyote, na baada ya siku 14 bila kutumika.
A session is a row in a table, not a claim sealed inside a token. Tap “sign out everywhere” and the next request from the stolen phone fails at once, instead of quietly working until the token expires. A session dies after 30 days regardless, and after 14 days untouched.
Kifaa kipya lazima kijithibitishe
A new device must prove itself
Kuingia kutoka kifaa ambacho namba yako haijawahi kukitumia kunahitaji uthibitisho wa ziada kwamba unaishikilia namba hiyo. PIN iliyoibiwa peke yake haitoshi kufungua pochi kutoka simu nyingine yoyote duniani.
Signing in from a device your number has never used requires extra proof that you hold that number. A stolen PIN alone is not a working wallet from any phone on earth.
Baada ya kuweka PIN upya
After a PIN reset
PIN ikiwekwa upya, hakuna kinachotoka kwenye pochi kwa saa 24. Salio lako liko salama na linaonekana; ni kutoka tu kunakosubiri. Hii ndiyo dirisha ambalo mwizi angetumia.
After a PIN reset, nothing leaves the wallet for 24 hours. Your balance is safe and visible; only value leaving waits. That window is the one a thief would use.
Kubahatisha kunazuiliwa
Guessing is throttled
PIN zisizo sahihi mfululizo zinafunga akaunti kwa muda. Kila mlango unaokubali jaribio, ikiwemo kuingia na namba za uthibitisho, umewekewa kikomo kwa namba na kwa mahali ombi linapotoka.
Repeated wrong PINs lock the account briefly. Every door that accepts a guess, sign-in and one-time codes included, is rate limited both per phone number and per originating address.
Milango isiyojulikana inafungwa
Unclassified doors are shut
Kila njia ya mfumo lazima itajwe kwenye jedwali la ruhusa likisema nani anaruhusiwa kuiita. Njia isiyotajwa inakataliwa, si kuruhusiwa. Kusahau ni kufunga, si kufungua.
Every route in the service must be named in an access table saying who may call it. A route that is not named is refused, not allowed. Forgetting closes a door rather than opening one.
Taarifa zakoYour data
Taarifa za kitambulisho ulizotoa kwenye KYC, ikiwemo namba ya NIDA, zimefichwa kwa msimbo zikiwa zimehifadhiwa. Nakala ya hifadhidata iliyoibiwa haitoi namba hizo wazi wazi.
The identity fields you gave at KYC, your NIDA number included, are encrypted at rest. A stolen database dump does not hand over those numbers in the clear.
Siri za uthibitishaji wa hatua mbili zimefichwa kwa njia ile ile.
Two-factor authentication secrets are encrypted the same way.
Picha ya kitambulisho chako inahifadhiwa kwenye hifadhi ya vitu, si kwenye seva inayofutwa kila deploy. Mfanyakazi anapotaka kuiona, kiungo kinatengenezwa kinachotaja hati moja na mfanyakazi mmoja, kinaishi kama dakika mbili, kinakufa mara moja akaunti yake ikisimamishwa, na kila upande wa muamala huo unaandikwa kwenye kumbukumbu ya nani aliona taarifa binafsi za nani.
The photograph of your ID is kept in object storage, not on a server that is wiped at the next deploy. When a member of staff needs to see it, a link is minted naming one document and one member of staff, living about two minutes, dead the instant that account is suspended, and both ends of that access are written to a log of who read whose personal data.
Kitendo chochote cha mfanyakazi kinachohusu pesa yako kinahitaji watu wawili: mmoja anaomba, mwingine anathibitisha. Kila kitendo kinahifadhiwa na jina, mahali, thamani ya awali na ya baadaye.
Any staff action that touches your money needs two people: one requests it, another confirms it. Every action is recorded with a name, an origin, and the value before and after.
Ufuatiliaji wa mienendo ya kifedha unafungua faili la uchunguzi, haukuzuii muamala. Tuhuma isiyo sahihi inayogandisha mshahara wa mtu siku moja kabla ya kodi ni mbaya kuliko uchunguzi wa polepole.
Financial monitoring opens a case for review, it does not block a transaction. A false positive that freezes somebody's salary the day before rent is a worse outcome than a slow review.
Sera kamili ya faragha na dataThe full privacy and data policy
Pesa yako inashikiliwajeHow your money is held
MojaWallet inashikilia thamani kwa niaba yako. Wewe huna funguo za pochi ya mnyororo; sisi tunazo. Hii inaitwa “custodial”, na ina maana mbili za wazi: hutapoteza pesa kwa kusahau maneno ya siri, na unatutegemea sisi kubaki tukiwa waaminifu na imara.
MojaWallet holds value on your behalf. You do not hold the chain keys; we do. This is called custodial, and it means two plain things: you cannot lose your money by forgetting a secret phrase, and you are relying on us to stay both honest and solvent.
Thamani inashikiliwa kama USDT (BEP-20, mtandao wa BNB Smart Chain). Kila mtumiaji ana anwani yake ya kupokea, na kiasi kinachoingia kinakusanywa kwenye pochi kuu ya huduma.
The value is held as USDT (BEP-20, on BNB Smart Chain). Every customer has their own receiving address, and what arrives is swept into the service's main wallet.
Mfumo unafuatilia uwiano kati ya kile leja inadai wateja wanamiliki na kile kilichopo hasa, na unamwita mtu pale kinapopungua chini ya kiwango kilichowekwa.
The system watches the ratio between what the ledger says customers hold and what is actually there, and pages a human when it falls below a set floor.
Upande wa pili wa kushikilia kwa niaba yako umeandikwa juu, kwenye orodha ya yasiyo kweli kutuhusu: hakuna leseni, hakuna bima, hakuna ukaguzi wa nje.
The other side of holding it for you is written above, in the list of what is not true of us: no licence, no insurance, no outside audit.
Ukikuta tatizo la usalamaIf you find a security problem
Tuambie kabla ya kumwambia mtu mwingine, na tutakushukuru. Tumia njia zilizo kwenye ukurasa wa msaada na uandike “usalama” kwenye kichwa cha ujumbe.
Tell us before you tell anybody else, and we will thank you for it. Use the channels on the support page and put “security” in the subject.