Privacy Policy

01Who decides what happens to your details

RentHub is run by ByteFrame Ltd, Nairobi, Kenya. Under Kenya's Data Protection Act, 2019:

• For landlords' own accounts, and for messages sent through this website, ByteFrame Ltd is the data controller.
• For tenants', caretakers' and fundis' details that a landlord enters, the landlord is the data controller and ByteFrame Ltd processes them on the landlord's behalf, only to run that landlord's book.

02This website

• No tracking. renthub.co.ke sets no cookies of its own, keeps nothing in your browser, and runs no analytics or advertising.
• Hosting. The site is served by Cloudflare, which, like any web host, handles your IP address to deliver the page.
• The contact form. If you write to us, we receive what you put in it: your name, phone number, email address if you give one, whether you are a landlord, agent or tenant, how many units you have, what you want and your message. The form is delivered to us by Web3Forms, which passes it on by email. We use it only to answer you, and for nothing else.
• The check that you are a person. The contact page, and only that page, uses hCaptcha to keep out automated spam. hCaptcha receives information about your browser and device to do that, and may set its own cookies, under its privacy policy.
• The sample book runs entirely in your browser with made-up data. Nothing you do in it is sent to us.

03What we keep about landlords

• Your name, business name, phone number, and email address if you give one.
• The paybill or till your tenants pay into, and the name M-PESA shows for it.
• Your password, stored only as a scrambled one-way form that cannot be turned back into the password.
• Sign-in records: when you signed in, and the kind of browser and device, so we can warn you about a sign-in from a new device.
• A record of changes in your book, such as payments posted and pay details changed, so you can see what was done and when.

We use these to run your book, keep it secure, and contact you about it. Our lawful basis is our agreement with you.

04What a landlord's book keeps about tenants and caretakers

• Tenants: name, phone number, ID or passport number, unit, rent, deposit, the dates they moved in and out, charges, payments and receipts, repairs they report, and messages about their rent.
• Payments come from the landlord's M-PESA statement: the payer's name as M-PESA shows it, the phone number as M-PESA shows it (usually with digits hidden), the transaction code, amount and date.
• Caretakers: phone number and the building they look after.
• Fundis a landlord lists: name, phone number and trade.

Each person sees only what concerns them. A tenant sees their own record and never another tenant's. A caretaker sees which doors are let and what has been reported, never what anyone owes, and never anyone's ID number.

05Who else sees it

We do not sell anyone's details, and we do not share them for advertising. The only others who handle them do so to run RentHub:

• Our hosting provider, which stores RentHub's data. We will name it here, with the country its servers are in, before any book is stored there.
• Our text message provider, which delivers sign-in codes and reminders. We plan to use Africa's Talking, and will confirm it here when texts are switched on.
• Anyone the law requires us to tell, such as a court order. We would tell you first unless the law stops us.

06How long we keep it

• A landlord's book is kept for as long as the landlord keeps it. Ask us to delete it and we will.
• Sign-in codes are deleted after a day.
• Sign-in sessions are deleted 30 days after they end.
• Text messages we sent are deleted 90 days after sending.
• Backups, made every night and encrypted, are kept for up to 14 days for daily copies and up to 12 months for monthly ones. A deleted book leaves the backups as they age out, within a year.

07Keeping it safe

Each landlord's book is kept apart from every other at the database level, so one book's records cannot be read through another's. Sign-in needs a code sent to your phone, and for landlords a password too. Changing where tenants pay asks for the password again and tells you by text and email. Backups are encrypted. Only the people who run RentHub can reach its servers.

08Your rights

Under the Data Protection Act, 2019, you can ask to be told what we keep about you, to see it, to have it corrected or deleted, to object to how it is used, and to have a copy to take elsewhere.

• Landlords and anyone who used this website: send us a privacy request, or email hellorenthub@gmail.com.
• Tenants and caretakers: ask your landlord first, since they keep your record. You can also write to us, and we will pass your request on and help them answer it.

If you are not happy with how we handle your details, you can complain to the Office of the Data Protection Commissioner at odpc.go.ke.

09Changes

When what we keep or who handles it changes, we update this page and its date, and tell landlords in the app before the change takes effect. RentHub is not meant for anyone under 18.