Privacy Policy

1. The landlord service

The Service helps landlords and authorised team members manage properties and units, review rental applications, handle maintenance requests, message tenants, record rent payments, and receive notifications. Tenants use a separate QejaCrib tenant app. Platform subscription billing is collected via M-Pesa (Paystack) on Android and the web portal; the iOS app does not process subscription checkout.

2. Information we collect

We collect information you provide and information generated when you use the Service:

• Identity and account: name, email, phone number, profile photo, and authentication identifiers, including sign-in through email, Google, or Apple via Firebase Authentication.
• Portfolio and operations: property and unit details, tenant contact records linked to your portfolio, application and maintenance information you review, rent records, and messages with tenants.
• Photos and documents: property images you choose to upload and tenant- or applicant-submitted images and documents that you view in application or maintenance workflows.
• Property location: coordinates and suggested address associated with a property when you place a map pin or choose “Use my current location.” With your permission, the app reads foreground device location for that action only. It does not request background location access or continuously track your device. You can deny permission and enter an address or place a pin manually.
• Team access: membership and permission records for landlord team accounts.
• Device and technical: push notification tokens, app version, and limited diagnostic data used to operate and secure the Service.

3. Permissions and how information is used

• Photo library: when you choose property images, the system photo picker lets you select the images to upload. We use selected images to display and manage your properties.
• Location: if you grant foreground location access and tap “Use my current location,” the app reads the device’s current coordinates and may request a suggested address. The result is used to set or suggest the property pin; it is not collected in the background.
• Notifications: if you opt in, we use a device push token to deliver application, maintenance, message, and other account notifications. You can turn notifications off in the app or device settings.
• We use account and portfolio information to provide property management, application and maintenance workflows, messaging, security, support, and legal compliance.

4. Legal bases

Where the Kenya Data Protection Act applies, we rely on performance of a contract for property-management services, consent where required (including optional foreground location and push notifications), and legitimate interests such as security, fraud prevention, and service improvement, balanced against your rights.

5. How information is shared

We do not sell personal information to advertisers. We may share information as needed with:

• Your tenants or applicants, for applications, leases, maintenance, and messages you send.
• Authorised team members, according to the permissions assigned by the landlord.
• Service providers acting on our instructions, including Supabase for database and hosting, Firebase/Google/Apple for authentication, and cloud storage for documents and photos.
• Google Maps, to provide map tiles and map interactions needed to display property locations. Google processes information under its own privacy terms.
• Authorities or other parties when required by law, court order, or to protect rights, safety, or property.

6. Retention and security

We retain personal information while an account is active and for a reasonable period afterward for legal, accounting, security, or dispute-resolution purposes. We use encryption in transit, access controls, and row-level security. No method of transmission or storage is completely secure. Account deletion is available in the app, subject to safeguards for active tenancies and applicable retention obligations.

7. Your rights and choices

Depending on applicable law, you may request access, correction, deletion, or restriction of your personal data, or object to certain processing. You can update profile details and notification preferences in the app. You can deny or revoke location permission in device settings; you can still enter an address or place a property pin manually.

For privacy requests, contact us using the details below. You may also lodge a complaint with the Office of the Data Protection Commissioner in Kenya.

8. Children

The Service is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can take appropriate steps.

9. Changes to this policy

We may update this policy from time to time. We will post revisions here and in the app with an updated effective date. Material changes may also be communicated in-app or by email where appropriate.

10. Contact

Privacy questions: hello@qejacrib.com

Product support: support@qejacrib.com