Legal

Privacy Policy

Last updated: [insert date]. This is a draft pending legal review.

1. What data we collect

Name, phone number, email, business details, and any photos you upload as part of a review or host profile.

2. Why we collect it

To verify accounts via OTP, enforce one-account-per-number, prevent fraud, and match reviews to the right host.

3. How we use it

We display masked phone numbers in search results (e.g. 0712***456), match reviews to hosts, and use aggregate data to improve the platform.

4. Data sharing

We share limited data with essential service providers — SMS/OTP delivery partners, payment processors, and cloud hosting — under strict data-processing agreements. We never sell your data.

5. Data retention

Account and review data is retained for as long as your account is active. Deleted-account data is purged within 90 days except where retention is required by Kenyan law.

6. Your rights under the Kenya Data Protection Act, 2019

You have the right to access, correct, or request deletion of your personal data. Submit a request to privacy@staycheck.co.ke and we'll respond within 30 days.

7. Data Protection Officer

Our DPO can be reached at dpo@staycheck.co.ke for any privacy-related queries.

8. Cookies and tracking

We use essential cookies to keep you logged in and analytics cookies to understand how the platform is used. You can control non-essential cookies in your browser settings.

9. Changes to this policy

We'll notify you of material changes to this policy by email or in-app notice at least 30 days before they take effect.

Note to developer: This draft is structured to Kenya Data Protection Act, 2019 requirements. Please have a lawyer review the final language, particularly the data-sharing and retention sections, before publishing.