Privacy Policy
Effective 17 October 2026
This policy explains how KaziNyumbani (“KaziNyumbani”, “we”, “us”) collects, uses, shares and protects personal data when you use the KaziNyumbani website and mobile apps (the “Service”). We process personal data in line with the Kenya Data Protection Act, 2019. KaziNyumbani is for people aged 18 or older.
1. Data we collect
| Data | Who | Why | Visible to others? |
|---|---|---|---|
| Name, email, phone, password (stored only as a salted Argon2 hash) | Everyone | Create and secure your account; contact you | Name is shown on worker profiles. Email/phone only after a paid hire (workers). |
| Work category, experience, availability, bio | Workers | Let employers find you | Yes, on your public profile |
| Profile photo | Workers (optional) | Show your profile | Yes, public |
| Monthly pay you and another user agree on, who agreed and when, and your confirmation that the ID check took place between you | Employers, workers | Record that two people were connected through KaziNyumbani | Only the other person in the agreement |
| Ratings and comments a client leaves about a worker they hired | Employers (author), workers (subject) | Help clients choose reliable workers | Yes: the star rating, comment and the client's first name are shown on the worker's profile. Staff can hide or remove a rating. |
| Job posts and job applications (including your message) | Employers, workers | Run the marketplace | Job posts are public. Applications are seen by the employer who posted the job. |
| M-Pesa phone number, amount, receipt number, payment status | Employers (and workers, if the admission fee is on) | Take and reconcile the one-time fee; prevent fraud | No |
| Chat messages between a client and a worker | Employers, workers | Let connected users talk about a job | Only the other person in the chat (and staff if a conversation is reported) |
| Reports you send about a profile, job or conversation | Everyone | Safety and moderation | No (staff only) |
| IP address and request logs (short-lived) | Everyone | Security, abuse and rate limiting | No |
We do not collect your precise location, contacts, SMS, call logs or advertising ID. The app does not contain advertising or third-party analytics. Photos are only read when you choose them with your phone's picker or camera.
2. How we use data
- To provide the Service: accounts, worker profiles, job listings, applications, and the one-time fee that unlocks contact details.
- To keep the platform safe, including responding to reports.
- To process payments and keep financial records.
- To comply with law and enforce our Terms.
We do not sell personal data and we do not use it for advertising or automated decisions that significantly affect you.
3. Who we share data with
- Workers see an employer's first name and job description. Once the employer has paid the one-time client fee, workers who applied can also see that employer's full name, phone and email and can chat with them.
- Employers see a worker's public profile. After an employer (client) has paid the one-time fee, that employer can request a hire and receives the worker's name, phone and email. They never receive ID numbers or ID photos.
- Safaricom (M-Pesa) processes payments. We receive the receipt number, amount and phone number from them.
- Hosting and infrastructure providers store our data on our behalf under confidentiality and security obligations. Servers may be located outside Kenya.
- Authorities where required by law or to protect people from harm.
4. Security
Data is encrypted in transit (HTTPS). Passwords are hashed. We do not collect or store identity documents. Staff accounts are role-restricted and admin actions are recorded in an audit log. No system is perfectly secure; if a breach affects you we will notify you and the Office of the Data Protection Commissioner as required.
5. How long we keep data
- Account and profile data: until you delete your account.
- Pay agreements: kept until either person deletes their account.
- Payment records (amount, status, receipt, date): kept after account deletion for accounting, fraud prevention and legal obligations. Your M-Pesa phone number on those records is removed when you delete your account.
- Audit logs and moderation records: kept as needed for safety and legal purposes.
6. Your rights and choices
You may ask to access, correct, delete or receive a copy of your personal data, object to or restrict processing, and withdraw consent.
- Access / copy: in your account go to Settings → “Download my data”.
- Correct: edit your profile in your account.
- Delete: in your account go to Settings → “Delete account”, or use the account deletion page if you no longer have the app. We complete requests within 30 days (in-app deletion is immediate).
- Complain: contact us first at [email protected]. You may also complain to the Office of the Data Protection Commissioner, Kenya (odpc.go.ke).
7. Children
The Service is not directed to anyone under 18 and we do not knowingly collect their data. If you believe a minor has registered, email us and we will remove the account.
8. Changes
If we make material changes we will update this page and, where appropriate, notify you on the website or by email.
9. Contact
KaziNyumbani (“KaziNyumbani”, “we”, “us”)
Email: [email protected]
Phone: 0732233300