How NyumbaPap handles your information

Last updated 12 August 2026

This notice explains the product's current data practices. It must receive qualified Kenyan legal review before production launch.

Information we collect

We collect account details such as your name, email address, and payment or contact phone number where needed, professional verification records, listing information, enquiries, viewing requests, reports, payment references, security logs, and consent choices. Exact addresses, contact details, identity records, and coordinates are treated as restricted information.

Why we use it

We use information to operate accounts, verify landlords and listings, process M-Pesa payments, release protected contact details after payment, coordinate viewings, investigate reports, prevent fraud, comply with law, and improve the service when analytics consent has been given.

Payments and sharing

M-Pesa transactions are processed through Safaricom Daraja. We send the minimum transaction data required for the payment. We may use vetted hosting, storage, messaging, monitoring, and verification providers acting under appropriate safeguards. We do not sell personal information.

Analytics choices

Optional product analytics is disabled until you choose "Allow analytics." You can clear the site's local storage to reset that choice. Essential security, session, and fraud-prevention processing does not depend on analytics consent.

Retention and security

Restricted fields are encrypted, access to protected contact information is audited, and public listing responses exclude exact location and contact data. Retention periods must follow operational, legal, tax, dispute, and fraud-prevention requirements; records are deleted or anonymised when no longer required.

Your rights

Subject to applicable Kenyan law, you may ask to access, correct, object to processing of, or delete eligible personal information. You may also raise a privacy complaint. Use the authenticated support route described on the Help page so we can verify your identity before acting.

International processing and changes

Some service providers may process data outside Kenya. Production deployment must document locations and safeguards. Material changes to this notice will be dated and communicated in the application.