Privacy Policy

Haraka Rentals (“we”, “our”, or “us”) operates the Haraka Rentals website and mobile application (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Haraka Rentals, you agree to the terms of this Privacy Policy. If you disagree, please discontinue use of the Service.

1. Information We Collect

a) Information you provide directly

• Name, email address, and profile photo (via Google Sign-In)
• Phone number (collected from agents during application, and optionally from tenants for WhatsApp reply notifications)
• Business name, operating locations, and professional bio (agents only)
• Identity verification documents — agents are required to upload a copy of their National ID and a selfie holding their ID. These are stored securely in Firebase Storage and used solely for identity verification purposes.
• Property listing details including descriptions, photos, and videos
• Messages and inquiries sent through the platform

b) Information collected automatically

• Device information (device type, operating system, app version)
• Usage data (screens visited, features used, search queries, app open events)
• IP address and approximate location (country/region level)
• Push notification tokens (if you enable notifications)
• Contact view records — when a tenant reveals an agent's phone number, we log this event (which user, which agent, timestamp) to prevent abuse and for analytics

c) Payment information

Payment processing is handled by IntaSend, a licensed payment service provider. We do not store your card or M-Pesa details. We retain transaction records (amount, date, status, provider reference) for billing and compliance purposes. Identity documents (National ID and selfie) uploaded by agents are stored in Firebase Storage, accessible only to authorised Haraka Rentals administrators, and are not shared with third parties.

2. How We Use Your Information

• To create and manage your account
• To verify agent applications and identities
• To display property listings to prospective tenants
• To facilitate communication between tenants and agents
• To process payments for subscriptions, contact bundles, and featured agent/listing placements
• To send transactional notifications (via WhatsApp, SMS, or push notifications)
• To prevent fraud and ensure platform security
• To improve the Service through analytics
• To respond to support requests

3. Sharing of Information

We do not sell your personal data. We may share your information with:

• Other users: Agent profiles (name, phone, listings) are visible to tenants who contact them. Your phone number is only revealed after you explicitly choose to view it.
• Service providers: Firebase (authentication and storage), IntaSend (payments), SMS and WhatsApp gateway providers — all bound by data processing agreements.
• Legal obligations: We may disclose information if required by law, court order, or to protect the rights and safety of our users or the public.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you request account deletion, we will delete or anonymise your personal data within 30 days, except where retention is required by law (e.g., financial records which we keep for 7 years).

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Opt out of marketing communications
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at the details below.

6. Security

We use industry-standard security measures including HTTPS encryption, Firebase security rules, and access controls to protect your data. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

7. Children's Privacy

Haraka Rentals is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a child, please contact us immediately.

8. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page and, where appropriate, via email or in-app notification.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us: