Privacy policy

Last updated: 28 September 2026

This policy explains what information the Kaya Yetu app and the kayayetu.com website collect, why, who it is shared with, and the choices you have. It applies to landlords, property managers, caretakers and tenants who use the app, and to anyone who visits this website.

Kaya Yetu is a property management app for landlords and tenants in Kenya, available on Google Play (package com.kayayetu.app). We are based in Nairobi, Kenya. You can reach us at info@kayayetu.com or on 0116 381 755.

When a landlord or property manager adds tenants, units and payments to Kaya Yetu, they decide what records to keep about their tenants, and we process that information on their behalf. For your own account details, and for this website, Kaya Yetu is responsible for your information.

• Your name, email address and phone number, and your role (landlord, manager, caretaker or tenant).
• A profile photo, if you add one.
• Sign-in details, handled by a secure sign-in service. We never see or store your password in readable form.

• Properties, units, rent amounts, bills, deposits, expenses and exit statements.
• Payment records: amounts, dates, the unit and month a payment is for, and the M-Pesa or bank reference. We never see or store your M-Pesa PIN or bank passwords.
• Maintenance requests, with any photos or files attached to them.
• Notices, messages and chats sent in the app.
• Visitor records entered at the gate: the visitor’s name, phone number and ID number.

• Approximate location, only if you allow it, to show the local weather on your dashboard. It is sent to a weather data provider to get the forecast and is not saved in your Kaya Yetu account.
• Notifications: a device token so we can send you payment, bill and repair notifications. You can turn notifications off in your phone’s settings.
• Fingerprint or face unlock, if you turn it on. This is handled by Android on your phone; we never receive your fingerprint or face data.
• Files and photos you choose to attach or download, such as repair photos and statements.
• App usage and diagnostics: how the app is used and how it performs (Google Analytics for Firebase), and security checks that help protect the service from misuse.

If you contact us or use Kaya Yetu on WhatsApp, we receive your WhatsApp number and the messages you send us, and we may send you messages there.

• If you book a demo, the details you type in the form: your name, phone number, email (optional), how many units you manage, and your message.
• Standard server logs kept by our hosting provider, such as your IP address, browser and the pages you visited.
• The website uses no advertising or tracking cookies. Fonts are loaded from Google Fonts, which receives your IP address when a page loads.

• To run the app: keep tenancy records, send bills and receipts, record payments and settle deposits.
• To take payments you start: when you pay by M-Pesa, your phone number and the amount are sent to Safaricom to process the payment.
• To send notifications and messages you would expect, such as bills, receipts, repair updates and notices.
• To reply when you book a demo or contact us.
• To keep the service secure, prevent fraud and fix problems.
• To understand how the app is used so we can improve it.

We do not sell your personal information, and we do not use it for advertising.

• Your landlord, property manager or caretaker (if you are a tenant), and your tenants (if you are a landlord) — only the records that relate to your tenancy.
• Google (Firebase), which stores the app’s data and runs its servers, sign-in, notifications and analytics.
• Safaricom (M-Pesa), to process payments you start.
• Meta (WhatsApp), if you use Kaya Yetu on WhatsApp.
• A weather data provider, which receives your approximate location only when the weather is shown.
• Authorities, when the law requires us to.

These providers only use the information to provide their service to us. Some of them store data on servers outside Kenya; we use providers that protect data to the standard the Kenya Data Protection Act, 2019 requires.

We keep your information while your account is active. Payment and tenancy records are kept after a tenant moves out, because the landlord needs them for accounts, deposits and tax. When an account is deleted we remove or anonymise its personal information within 30 days, except records we must keep by law. Demo requests are kept for up to 2 years.

Under the Kenya Data Protection Act, 2019, you can ask us to:

• show you the personal information we hold about you;
• correct information that is wrong;
• delete your information or your account;
• stop using your information for a purpose you object to.

You can also turn off location, notifications and fingerprint unlock at any time in your phone’s settings.

To delete your Kaya Yetu account and its personal information, email info@kayayetu.com from the email address on your account, or call 0116 381 755, and say that you want your account deleted. We confirm who you are and delete it within 30 days. Tenants can also ask their landlord or property manager to remove them. Records a landlord must keep by law, such as past payments, are kept for as long as the law requires.

Information is sent over encrypted connections and stored on Google Cloud. Access in the app depends on your role, so tenants only see their own records. No system is perfectly secure, so please keep your phone locked and your sign-in details private.

Kaya Yetu is for adults. It is not meant for anyone under 18, and we do not knowingly collect information about children.

If we change this policy, we will update the date at the top of this page, and tell you in the app if the change is significant.

Questions or requests about your privacy: info@kayayetu.com · 0116 381 755 · Nairobi, Kenya. If you are not happy with our answer, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).