Privacy Policy

Last updated: September 12, 2026

KejaMarket ("we", "us", "our") is Kenya's #1 online rental property marketplace, operated at kejamarket.co.ke. This Privacy Policy explains how we collect, use, share and protect your personal data in compliance with Kenya's Data Protection Act 2019 and other applicable laws.

1. Information We Collect

We collect the following personal data when you use KejaMarket:

• Account information: Full name, phone number, email address, and password (stored encrypted)
• Property listings: Property details, photos, location coordinates, rent amounts posted by landlords
• Messages: Inquiries sent between tenants and landlords through our platform
• Payment data: M-Pesa phone number and transaction receipts (we do not store card details)
• Usage data: Pages visited, search queries, device type, and IP address
• Location data: General location (city/suburb) based on your listings or searches

2. How We Use Your Information

• To create and manage your account
• To display rental listings to prospective tenants
• To connect tenants with landlords via SMS and in-app messaging
• To process payments via M-Pesa Lipa Na M-Pesa
• To send SMS alerts for new matching rental listings (paid subscription)
• To improve our platform and prevent fraud
• To comply with legal obligations

3. SMS Communications

By registering on KejaMarket, you consent to receiving transactional SMS messages including OTP verification codes, listing approval notifications, payment confirmations, and rental alerts (if subscribed). You can opt out of marketing SMS at any time by contacting us.

4. Sharing Your Information

We do not sell your personal data. We only share your data with:

• Safaricom M-Pesa: For payment processing
• Africa's Talking: For SMS delivery
• Cloudinary: For image hosting and CDN delivery
• Law enforcement: When required by Kenyan law

Landlord contact details (phone number) are only revealed to registered and logged-in users.

5. Data Storage & Security

Your data is stored in a secure PostgreSQL database hosted in the EU (Frankfurt, Germany). We use bcrypt encryption for passwords, HTTPS for all connections, and JWT tokens for authentication. We do not store M-Pesa PINs or payment card numbers.

6. Your Rights (Kenya Data Protection Act 2019)

Under the Data Protection Act 2019, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your account and personal data
• Object to processing of your data for marketing purposes
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

7. Cookies

KejaMarket uses localStorage (not cookies) to store your session and preferences. No third-party tracking cookies are used.

8. Children's Privacy

KejaMarket is not intended for users under 18 years of age. We do not knowingly collect personal data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users via SMS when significant changes are made. Continued use of the platform after changes constitutes acceptance of the updated policy.

© 2026 KejaMarket. All rights reserved. | Terms & Conditions | Home