Privacy Policy

• Account data — name, email, phone number, county/town, profile photo and bio you choose to add.
• Listings and activity — listings you post, applications, bookings, messages, reviews and notifications.
• Payment data — for M-Pesa payments we process your phone number, the amount, and the M-Pesa receipt number. We never see or store your M-Pesa PIN.
• AI tool inputs — text you submit to AI tools (e.g. CV details) is processed to generate your output, with usage counted against your plan.
• Technical data — standard logs (IP, browser, pages viewed) for security and performance.

• To run the marketplace: showing your listings, delivering messages, processing applications and bookings.
• To process Premium payments and activate subscriptions.
• To send transactional notifications (in-app and email) about activity that concerns you — new applications, booking updates, payment confirmations.
• To keep the Platform safe: fraud prevention, abuse detection and enforcing our terms.

We do not sell your personal data.

• Other members — your public profile and listings are visible to users of the Platform; contact details you place in a listing (e.g. a WhatsApp number on a business listing) are public by your choice.
• Service providers — hosting (Vercel), database and authentication (Supabase), email delivery (Resend), payments (Safaricom M-Pesa) and AI processing providers. Each receives only what it needs to provide its service.
• Authorities — when required by Kenyan law or a valid legal process.

Under the Data Protection Act, 2019 you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data or your account;
• object to certain processing.

To exercise any of these, reach us via the contact page. You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

We keep your data while your account is active and for as long as needed for the purposes above or to meet legal obligations, after which it is deleted. Data is stored with access controls and encryption in transit; payment callbacks and administrative operations run on server-side infrastructure that is never exposed to the browser.

If we materially change this policy we will announce it on the Platform. Continued use after changes means you accept the updated policy. See also our Terms of Service.