Privacy Policy
1. Who we are
The Service helps tenants and applicants browse listings, apply for units, manage active tenancies, pay rent and utilities where enabled, submit maintenance requests, message landlords, and receive notifications. Landlords and property managers use a separate QejaCrib landlord platform; this policy covers the tenant-facing app unless we say otherwise.
2. Information we collect
We collect information you provide directly and information generated when you use the Service:
- Identity & account: name, email, phone number, profile photo, and authentication identifiers (including sign-in via email, Google, or Apple through Firebase Authentication).
- Tenancy & property: lease details, unit and property names, rent balances, payment and deposit status, utility bills, and documents your landlord shares with you.
- Applications & search: saved listings, rental applications, application messages, and related preferences.
- Payments: amounts, payment status, payment references, M-Pesa phone numbers you enter for STK push (where enabled), and payment proof images you upload for manual payments.
- Maintenance & visitors: request titles, descriptions, photos, visitor registrations, and related notes.
- Communications: messages between you and your landlord or property manager within the app.
- Device & technical: push notification tokens, app version, and limited diagnostic data to operate and secure the Service.
3. How we use your information
- Provide and improve the Service, including rent ledgers, maintenance workflows, messaging, and lease-related documents.
- Process payments through your landlord's chosen method (for example manual paybill instructions with proof upload, or automated M-Pesa STK via Paystack where enabled).
- Send notifications you opt into, such as rent reminders, payment confirmations, and maintenance updates.
- Verify identity, prevent fraud, and protect the security of accounts and data.
- Comply with law and enforce our Terms and Conditions.
- Respond to support requests and resolve disputes related to the Service.
4. Legal bases (Kenya)
Where the Kenya Data Protection Act applies, we rely on: (a) performance of a contract with you (operating the Service for your tenancy); (b) your consent where required (for example optional push notifications); and (c) legitimate interests such as security, fraud prevention, and improving the Service, balanced against your rights.
5. How we share information
We do not sell your personal information to advertisers. We may share information with:
- Your landlord or property manager — tenancy-related data needed to manage your lease, payments, maintenance, and communications.
- Service providers acting on our instructions — including Supabase (database and hosting), Firebase/Google/Apple (authentication), Paystack and mobile money networks (payment processing where enabled), and cloud storage for documents and payment proofs.
- Authorities or other parties when required by law, court order, or to protect rights, safety, or property.
Payment processors receive only the data needed to complete a transaction (such as amount, reference, and phone number for STK). We do not store your M-Pesa PIN or full card details in the tenant app.
6. Retention & security
We retain personal information while your account is active and for a reasonable period afterward for legal, accounting, or dispute resolution purposes. We use encryption in transit, access controls, and row-level security in our database. No method of transmission or storage is completely secure.
7. Your rights & choices
Depending on applicable law, you may request access, correction, deletion, or restriction of your personal data, or object to certain processing. You can update profile details and notification preferences in the app where available.
To exercise other rights or ask privacy questions, contact us using the details in Section 10. You may also lodge a complaint with the Office of the Data Protection Commissioner in Kenya.
8. Children
The Service is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided data to us, contact us and we will take appropriate steps to delete it.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version in the app and on this page with an updated effective date. Material changes may also be communicated in-app or by email where appropriate. Continued use after the effective date means you accept the updated policy.
10. Contact
QejaCrib
Email: hive.property.management.com@gmail.com