Privacy Policy

Account & identity: full name, email, phone number, WhatsApp, National ID, county/city, role (renter, landlord, agency, broker, mover, maintenance), and a mandatory live face-scan selfie used for identity verification.

Business / professional data: agency or business registration number, lead agent details, vehicle registration (movers), service type and area (maintenance).

Listings & uploads: property photos, descriptions, prices, location co-ordinates, vehicle photos, service photos.

Payment metadata: M-Pesa code and payer phone, or Google Pay token reference. We never receive or store full card numbers.

Usage data: device, IP, pages visited, search queries, saved items, cart contents, messages exchanged on-platform.

• Contract — to provide the marketplace, publish your listings, route enquiries and process payments.
• Legitimate interest — fraud prevention, identity verification, abuse investigation, product analytics.
• Legal obligation — tax records, lawful requests by authorities.
• Consent — marketing emails, optional location pinning, optional WhatsApp integration. You can withdraw consent at any time.

The face scan captured during signup is a one-time photo, not a biometric template. It is stored in a private, access-controlled bucket and is reviewed only by Nyumbani Prime trust & safety staff for the sole purpose of confirming you are a real person and the rightful holder of the account. You can request deletion of your scan at any time from your account; we will purge it within 30 days and your account will lose the verified badge.

• Operate the marketplace (search, list, contact, message).
• Verify identity and prevent fraud, scams and duplicate listings.
• Process payments (KES via M-Pesa Paybill, USD via Google Pay / Stripe).
• Send transactional emails (sign-in, payment confirmation, security alerts).
• Improve product features and measure performance.

We do not sell personal data. We share strictly necessary data with:

• Payment processors — Safaricom M-Pesa, Stripe / Google Pay.
• Hosting & infrastructure providers under written confidentiality.
• Mapping providers (Google Maps) when you choose to view a location.
• Law enforcement when compelled by a valid court order.
• Other users only the data they need: name, photo, listing details, contact buttons (phone/WhatsApp) when you choose to enable them.

Active accounts: data kept while the account is active. After you delete your account we anonymise PII immediately; listings, reviews and conversations are kept with a "Deleted user" label to preserve marketplace integrity. Verification photos and ID numbers are purged within 30 days. Payment records are retained 7 years (tax law).

You can access, correct, export or delete your data at any time. The "Delete my account" button on your account page triggers an immediate anonymisation. You can also write to privacy@housinghub.global; we respond within 30 days. You may lodge a complaint with the Office of the Data Protection Commissioner of Kenya (odpc.go.ke).

All data is encrypted in transit (TLS 1.2+) and at rest. Verification documents live in a private bucket, accessible only via signed URLs to authorised staff. We enforce Row-Level Security at the database level so users only access their own data. We never send your password or full card number over email or SMS.

We use essential cookies for authentication and session management. We use limited analytics cookies to count visits and detect abuse. You can clear or block cookies at any time in your browser; some features may then break.

The platform is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe we have, write to us and we'll delete it.

We may update this policy. Material changes will be announced in-app or by email at least 14 days before they take effect.

Data controller: Nyumbani Prime Ltd, Nairobi, Kenya.
Email: privacy@housinghub.global