Privacy notice and your data rights

Under the Kenya Data Protection Act 2019 you decide what happens to your personal data. This page says what we hold, why, and how to use your rights.

What data we hold

Only what is needed to manage a rental.
Tenant details
Name, phone, email, national ID, emergency contact and KRA PIN, entered by your landlord or by you.
Money records
Tenancies, invoices, payments and M-Pesa references, water meter readings.
Visitor logs
Visitor name, phone, last digits of ID, purpose and vehicle, when a tenant hosts a visitor.
Maintenance and messages
Repair requests and the reminders sent to you.

Retention, rights and contacts

Who is responsible

Your landlord
Decides why and how your data is used (data controller). They hold their own ODPC registration.
Kisoko Lab
Operates Crib as a data processor. Registration details will be shown here once issued.
ODPC
The Office of the Data Protection Commissioner supervises compliance: odpc.go.ke.