Privacy Policy

Account Information

When you create an account, we collect your full name, email address, phone number, and role (landlord, property manager, tenant, or administrator). Tenants may also provide identification documents during the KYC (Know Your Customer) onboarding process.

Property and Payment Data

Landlords and property managers provide property details (addresses, unit configurations, rent amounts), tenant records, billing schedules, and payment settings. We also store transaction records, M-Pesa confirmation codes, receipt numbers, and bank statement uploads.

Usage and Device Data

We automatically collect device type, browser information, IP address, pages visited, and interaction patterns. This data helps us improve platform performance and detect fraudulent activity.

Communications

SMS messages sent through the platform, notification history, and any correspondence with our support team are retained for service delivery and dispute resolution.

Service Delivery

We use your data to operate and maintain your account, process rent and bill payments through M-Pesa and Tuma, generate invoices and receipts, send payment reminders, and facilitate communication between landlords and tenants.

Platform Improvement

Aggregated, anonymised usage data helps us understand how the platform is used so we can improve features, fix bugs, and optimise performance.

Security and Compliance

We use account and device data to detect unauthorised access, prevent fraud, enforce our Terms of Service, and comply with applicable Kenyan laws and regulations.

Communications

We may send you transactional emails and SMS messages related to your account activity. Marketing communications are sent only with your explicit consent and can be unsubscribed at any time.

Service Providers

We share necessary data with integrated third-party services: Safaricom (M-Pesa payments), Tuma (bank transfers), Supabase (authentication infrastructure), and TalkSasa (SMS delivery). These providers are contractually bound to use your data only for the services they provide to us.

Legal Obligations

We may disclose information to Kenyan law enforcement, regulatory authorities, or courts when legally required. We will notify you of such requests unless prohibited by law.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. You will be notified before your data becomes subject to a different privacy policy.

We Do Not Sell Data

Makazi Dash does not sell, rent, or trade your personal information to third parties for their marketing purposes.

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL) and at rest, role-based access controls, secure authentication via Supabase with optional two-factor authentication, rate limiting on sensitive endpoints, and regular security audits. While no system is 100% secure, we take every reasonable precaution to safeguard your information against unauthorised access, alteration, or destruction.

We retain your personal data for as long as your account is active. When you delete your account, we remove your personal information within 30 days, except where we are required to retain certain records for legal, accounting, or regulatory compliance purposes. Transaction records may be retained in anonymised form for aggregate reporting.

Under the Kenya Data Protection Act, 2019, you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data (subject to legal retention requirements), object to processing of your data for certain purposes, and lodge a complaint with the Office of the Data Protection Commissioner of Kenya. To exercise any of these rights, contact us at support@makazidash.com.

We use essential cookies to maintain your login session and remember your preferences. We do not use advertising cookies or third-party tracking pixels. Analytics data is collected in aggregate form and does not personally identify you. You can control cookie settings through your browser preferences.

Makazi Dash is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the platform at least 30 days before they take effect. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how your data is handled, please contact us: Email: support@makazidash.com Phone: 0798 118 515 | 0708 769 459 Address: Pension Towers, 14th Floor, Loita Street, Nairobi, Kenya