1. Who is responsible for your data

TrueHome Kenya is the data controller. Contact us about anything in this policy at support@truehomekenya.com.

2. What we collect

• Browsing the site: no account is needed. We don't use advertising or tracking cookies. Your browser stores a few settings on your own device (for example, listings you've reported).
• Account: your email address, used to send you sign-in links.
• Listings: property details, photos, location, and the contact name, role and phone number you choose to publish. These are public, so anyone can see them.
• Verification: your full name, National ID number, a copy of your ID, and a Title Deed or management agreement, plus optionally your title/LR number and Estate Agents Registration Board number.
• Reports: when you report a listing, the reason, any details you write and, if you choose, your phone or email.

3. Why we use it

• To let you sign in and publish, edit and remove your listings (performing our service to you).
• To check that listers are who they say they are and own or manage the property, and to show a Verified badge. We do this to protect tenants from fraud (your consent, and our legitimate interest in preventing scams).
• To investigate reported listings and remove fraudulent ones (legitimate interest).
• To meet legal obligations, such as responding to lawful requests from the police or courts.

We do not sell your data or use it for advertising.

4. What's public and what's private

• Public: your listings and their contact details, and, if you're verified, your badge code and a short version of your name (e.g. "Jane K.").
• Private: your email, ID number, ID and ownership documents, and reports. Only TrueHome Kenya's review team can see these.

5. Who we share it with

We use these service providers to run the site. They process data only on our instructions:

• Supabase: database, sign-in and file storage (servers in the European Union, Ireland).
• Brevo: sends sign-in emails (European Union).
• GitHub Pages: hosts the website (United States).
• OpenStreetMap and content delivery networks (jsDelivr, unpkg, cdnjs, Tailwind): deliver maps and website code; they see your IP address when your browser loads them.

Because these providers are outside Kenya, your data is transferred abroad. We use providers that apply strong security and data-protection safeguards, as required by Part VI of the Data Protection Act.

We may also share information with the police or other authorities when the law requires it, or to report suspected fraud.

6. How long we keep it

• Listings: until you delete them or your account.
• Verification documents: while you're a verified lister, and deleted when you withdraw your request, close your account, or ask us to. If a request is rejected, we delete the documents within 90 days unless you resubmit.
• Reports: up to 2 years, so we can spot repeat scammers.

7. How we protect it

Data is encrypted in transit (HTTPS). Database rules ensure each person can only change their own data, and identity documents are kept in private storage that the public cannot access.

8. Your rights

Under the Data Protection Act you can ask us to:

• tell you what data we hold about you and give you a copy;
• correct inaccurate data;
• delete your data or your account;
• stop or restrict using your data, or withdraw your consent to verification at any time;
• move your data to another service.

Email support@truehomekenya.com. We'll reply within 7 days. If you're unhappy with our answer, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

9. Children

This site is for adults. You must be 18 or over to create an account or list a property.

10. Changes

If we change this policy, we'll update the date at the top and, for important changes, tell signed-in users by email.