Privacy Policy

1. Introduction

HousezArena Kenya Ltd operates patakrib.vercel.app (the “Platform”). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use HousezArena. We are committed to protecting your privacy and handling your data responsibly in accordance with the Kenya Data Protection Act 2019.

By using HousezArena, you consent to the collection and use of your information as described in this policy.

2. Information We Collect

Personal information (all users):

• Name and email address when you register an account.
• Phone number (optional, provided at your discretion).
• Password — stored as a one-way bcrypt hash; we never see your plain-text password.

Property information (listers only):

• Property address, description, and rental details.
• GPS coordinates captured at listing time.
• Property photographs you upload.
• Amenities, matatu routes, and other listing details you provide.

Usage information:

• Properties you view (to support recently-viewed functionality).
• Properties you save (to populate your saved list).
• Messages you send and receive on the platform.
• Search queries and filters used (to improve search results).

Location information:

• Your device's location when you use the map or in-app navigation features.
• Location access is only requested with your explicit browser permission.
• Real-time navigation location is never stored permanently on our servers.
• Lister GPS is captured once at listing time and stored with the listing.

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the HousezArena service.
• Connect property seekers with listers.
• Display property locations accurately on our map.
• Enable in-app messaging between seekers and listers.
• Show you relevant property listings and search results.
• Track property views and saves for lister analytics.
• Send important service notifications (e.g., new messages, account updates).
• Detect and prevent fraudulent or abusive activity.
• Improve and develop the platform.

4. Information Sharing

We do not sell your personal data. Ever.

We share information only in the following limited circumstances:

• Between seekers and listers as part of the service — your name and messages are shared when you initiate a conversation.
• With Supabase, our database provider, whose servers are hosted in the European Union and comply with GDPR.
• With Vercel, our hosting provider, for the purpose of delivering the web application.
• When required by Kenyan law, a court order, or to protect the rights and safety of our users.

5. Data Security

We take the security of your data seriously. Our measures include:

• Passwords are hashed using bcrypt with a salt factor of 10 — they are never stored in plain text.
• All data is transmitted over HTTPS/TLS encryption.
• Our database is hosted on Supabase with encryption at rest.
• Access to the production database is restricted to authorised team members only.
• We regularly review and update our security practices.

Despite these measures, no internet service can be 100% secure. Please use a strong, unique password and keep your credentials safe.

6. Your Rights

Under the Kenya Data Protection Act 2019, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your account and all associated data.
• Export your data in a portable format.
• Withdraw consent for any non-essential data processing.
• Object to processing of your personal data.

To exercise any of these rights, email us at privacy@patacrib.co.ke. We will respond within 30 days.

7. Data Retention

• Account data: retained while your account is active and for 90 days after deletion.
• Property listings: retained while the listing is active; deleted when you remove the listing.
• Messages: retained for 12 months from the date of the message.
• Property view logs: retained for 30 days for analytics purposes.
• Navigation location data: never stored; exists only in your browser session.

8. Cookies

We use a minimal number of cookies to operate the platform:

• Session cookie: required for login and keeping you signed in. This is an essential cookie.
• No advertising cookies.
• No third-party tracking cookies.
• No analytics cookies from third parties.

You can control cookies through your browser settings. Disabling the session cookie will prevent you from logging in.

9. Children's Privacy

HousezArena is intended for users who are 18 years of age or older. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us at privacy@patacrib.co.ke and we will delete the account promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes by email or by displaying a prominent notice on the platform. The “Last updated” date at the top of this page reflects the most recent revision.

11. Contact Us

For privacy questions, data requests, or concerns, please contact:

Privacy enquiries: privacy@patacrib.co.ke

Data Controller: HousezArena Kenya Ltd · Nairobi, Kenya