Privacy Policy

CribsKenya ("we", "us") is a property technology company serving Kenya. This policy explains what personal information we collect when you use our hub, our management platform or our listings marketplace (together, the "services"), why we collect it, and what you can ask us to do with it.

Using any of the services means you accept the practices described here. If you do not accept them, please do not use the services.

Information you give us directly: your name, email address and telephone number when you create an account; property, unit and tenancy details you enter; payment instructions; messages and support requests; and the contents of maintenance tickets and utility readings.

Information generated through the services: payment receipts recorded against a unit, reminder schedules and reminder delivery status, ticket status and history, utility readings, and an activity log of changes made to a record.

Technical information: the device type, browser, operating system, screen size, referring page and pages you visit, and a session cookie or similar identifier needed to keep you signed in.

We do not collect special-category data as defined under Kenyan law, and we do not knowingly collect data from anyone under 18.

To provide the services: authenticate you, store and display your properties and units, process rent payments, generate and send reminders and notifications you have opted into, and record maintenance and utility history.

To support you: respond to enquiries, investigate problems and improve the reliability of the services.

To keep the services secure: detect and prevent fraud, abuse and unauthorised access, and enforce our terms.

To meet legal obligations: retain records where Kenyan law requires it, and respond to valid legal process.

We do not sell personal information. We do not use information collected through the services to build advertising profiles for third parties.

Rent payments are processed by third-party payment providers. Card details are entered on the provider's own payment page and never pass through or touch our servers. We receive and retain the resulting transaction reference, amount, status and timestamp so a receipt can be attached to the relevant unit.

Providers act as independent controllers or processors for the data they collect under their own terms. We are not responsible for the content of a provider's privacy policy or for their security practices beyond the controls we reasonably impose.

Strictly necessary cookies keep you signed in and remember preferences such as your interface state. They cannot be switched off without breaking the services.

Analytics cookies, where enabled, tell us which pages are used so we can prioritise work. They are aggregated and do not identify you individually. If you prefer, browser settings let you block cookies and analytics cookies at least; the services will still function.

Service providers who host our infrastructure, deliver email, provide analytics or process payments, each bound to use the information only on our instructions and to keep it confidential.

Professional advisers, auditors and insurers where necessary.

Authorities, where we are legally required to disclose. We will tell you unless the law forbids us from doing so.

A buyer or successor in the event of a merger, reorganisation or sale of assets, in which case this policy continues to apply to your information.

We do not sell, rent or trade personal information to third parties.

Our service providers operate data centres outside Kenya. Information you submit may therefore be processed outside Kenya, in a jurisdiction with a different level of data protection. We rely on contractual safeguards with those providers for transfers.

Account and operational records — properties, payments, receipts, maintenance history, utility readings — are kept for as long as your account is active, because they are the record of the tenancy and of the money that changed hands.

After you close your account, we keep the transactional record for the period Kenyan law requires, and delete the rest.

Logs used for security and troubleshooting are kept for a limited period and then deleted on a rolling schedule.

You can ask us to delete your information at any time. We will do so unless we are required to retain it.

We encrypt traffic between your device and our servers, store credentials so they cannot be read in plain text, restrict staff access on a need-to-know basis, and log administrative actions.

No system is perfectly secure. If a breach affects your personal information we will notify you and the relevant authority without undue delay and describe what you can do to protect yourself.

Subject to the limits in Kenyan law, you may ask us to confirm what personal information we hold about you, give you a copy of it, correct anything inaccurate, delete it, restrict how we use it, or object to a particular use. You may also withdraw consent where we rely on it.

Write to us at the email address below and we will respond within the period required by law. We may ask you to verify your identity before we act on a request. If you are unhappy with our response you may complain to the Office of the Data Protection Commissioner.

If we make a material change we will update the date at the top of this page and, for significant changes, notify account holders by email or in-product notice before the change takes effect.

Privacy questions and rights requests: cribskenyahomes@gmail.com. We operate remotely and have no postal address, so email is the only way to reach us — write to that address and we will respond within the period required by law.