Privacy Policy

RumiaRent is owned and operated by Stratnovo. This policy explains what personal data RumiaRent collects, why, who it is shared with, and the choices you have. It is written with Kenya's Data Protection Act, 2019 in mind.

For the tenant records that a landlord or caretaker adds, the landlord decides what is entered and why. RumiaRent processes those records on the landlord's behalf to run the service.

Account details: name, email address, phone number and, if you set one, a password, which we store only in scrambled form. For landlords, we also keep organisation and property details and their M-Pesa paybill number.

If you sign in with Google, Google shares your name, email address and profile photo with us, and confirms that the email address is yours. We use these only to create your account and sign you in. We never see your Google password and get no access to your Gmail, contacts, files or any other Google data. You can remove RumiaRent from your Google account at any time at myaccount.google.com/permissions.

If you sign in with an email link, we keep a scrambled copy of the one-time link and code until it is used or expires.

Tenant records entered by a landlord or caretaker: name, phone, email, national ID number, occupation and address, next-of-kin or emergency contacts, and the tenancy, rent charge and payment history.

Records you keep in RumiaRent: expenses and their receipts, messages sent between landlords, caretakers, tenants and our support team, and support tickets.

Technical data: the information your browser sends when you use the site, such as IP address and device type, kept in server logs to run and secure the service.

We do not collect card details. Paystack collects those when a landlord pays for a RumiaRent subscription. For rent, Safaricom tells us the payer name, amount, M-Pesa code and account number of payments made to a landlord's paybill, so we can record and receipt them.

To run RumiaRent: create accounts, track tenancies and rent, take and record payments, send receipts and rent reminders, calculate figures such as rental income tax, and give support.

To keep the platform secure, prevent fraud, keep an audit trail of sensitive actions, and meet legal obligations.

We send you update and marketing emails only if you turn them on in Settings, and every one has an unsubscribe link. Receipts, reminders, invitations and password resets are account emails and are sent regardless.

We do not sell personal data and we do not run advertising or analytics trackers on RumiaRent.

Only the service providers needed to run RumiaRent: Safaricom (M-Pesa payment notices), Paystack for subscription payments, Africa's Talking for SMS, our email provider for email, Google when you choose to sign in with Google, Cloudflare, which delivers and protects the website, and our hosting provider. We also share data when the law requires it or to protect people from fraud or harm.

Within an organisation, people see only what their role allows. A caretaker sees the properties they are assigned, and a tenant sees only their own tenancy and payments.

RumiaRent is hosted on servers in Johannesburg, South Africa. Some of our providers may also process data outside Kenya. We only use providers that protect data to a reasonable standard.

Rent charges and payments are financial records and are kept so that accounts stay correct and auditable. Other personal data is kept while your account is active and for as long as we need it for the purposes above or the law requires. You can ask us to delete personal data we no longer have a reason to keep.

Traffic to RumiaRent is encrypted, each landlord's data is kept separate from every other landlord's, access is limited by role, and sensitive actions are logged. No system is perfectly secure, so please use a strong, unique password.

We use only the cookies and local storage needed to keep you signed in, remember your settings such as light or dark mode, and let the app work offline. We do not use advertising or tracking cookies.

Under the Data Protection Act you can ask to see the personal data we hold about you, have wrong data corrected, have data deleted where we have no reason to keep it, object to certain uses, and receive a copy of your data. Tenants can also ask their landlord, who decides what is recorded about them.

To use any of these rights, email [email protected]. If you are not satisfied with our answer, you can complain to the Office of the Data Protection Commissioner of Kenya.

RumiaRent is for adults. You must be at least 18 to hold an account, and we do not knowingly collect data from children.

If we change this policy we will update it here and change the date above. For significant changes we will also tell account holders.

Questions about this policy or your data: [email protected].