Houzzy is an app for renting, buying and booking stays in Hola, Tana River, Kenya. This policy explains what personal data Houzzy collects, why, who helps us process it, how long we keep it, and the rights you have under Kenya’s Data Protection Act, 2019.
Who we are
Houzzy (“we”, “us”) is the data controller for the app and the Houzzy Studio admin tool. Contact us about privacy at privacy@houzzy.co.ke.
What we collect, and why
- Email address
- To sign you in with a one-time code and to contact you about your account.
- Name and profile photo
- Shown to the people you deal with (owners, guests) in chats, requests and on your listings, so both sides know who they are talking to.
- ID document photo and selfie
- Only if you choose to verify. Houzzy staff use them to confirm you are a real owner before showing the “Verified owner” badge. Only you and Houzzy admins can open these files.
- Listings you create
- Photos, description, price, area and map pin. Published listings are visible to everyone in the app; that is their purpose.
- Viewing and stay requests
- To pass your request to the owner and show its status to both of you.
- Chat messages
- To deliver them and keep a record both sides can refer to. Phone numbers and email addresses are hidden automatically until a viewing or stay is confirmed, to protect you from scams.
- Searches you type or speak
- To find matching homes, and (without your name) to understand what people in Hola are looking for.
- Saved homes
- To keep your saved list in step across your devices.
- Notification token
- To send you notifications about messages and requests. You can turn notifications off in your phone’s settings.
- Reports you file
- To investigate scams and unsafe listings.
- Owner phone number
- Only when Houzzy staff list a place on an owner’s behalf, so staff can pass on requests. Never shown in the app.
We do not track your location, use advertising IDs, sell your data, or show ads. Voice search uses your phone’s own speech recognition; Houzzy receives only the text.
Legal basis
We process your data to provide the service you asked for (performance of a contract), with your consent where we ask for it (for example ID verification and notifications), and for our legitimate interest in keeping Houzzy safe from fraud.
Who processes data for us
- Appwrite (servers in Frankfurt, Germany): accounts, database, file storage and our server code.
- Google Firebase: delivering push notifications and test builds of the app.
- Google Gemini: turning search text into filters and drafting listing descriptions from an owner’s notes. Only the text you type is sent.
- Resend: sending sign-in code emails.
- OpenStreetMap: map tiles. Your device requests map images directly from their servers.
Some of these providers store or process data outside Kenya. We use them under their data protection terms and send them only what they need.
Who can see what
- Everyone in the app: published listings, and the owner’s first name and profile photo on them.
- People you deal with: your name and photo, your requests to them, and your messages to them.
- Houzzy admins: what they need to run and protect the service, including ID verification files and reports.
How long we keep it
- Your account data, while your account exists.
- Sign-in codes: deleted once used, and never kept longer than an hour.
- When you delete your account, see what is deleted and what is kept.
Security
Data travels over encrypted connections. ID documents are stored privately. Sign-in codes are stored only in a scrambled form, expire after 15 minutes, and lock after five wrong tries. Access to admin tools is limited to Houzzy staff and recorded in an audit log.
Your rights
Under the Data Protection Act, 2019 you can ask to access, correct or delete your personal data, object to some processing, and withdraw consent. You can edit your name and photo in the app and delete your account at any time. For anything else, email privacy@houzzy.co.ke. If you are not satisfied, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).
Children
Houzzy is for adults (18 and over). We do not knowingly collect data from children.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect.