Privacy Policy
Last updated: August 2026 • Compliant with the Kenya Data Protection Act, 2019 (ODPC).
Privacy-First Architecture
CampusKey collects only minimal, essential information necessary to facilitate safe student housing discovery, verified landlord & agency connections, semester tenancy tracking, and secure M-PESA transactions in Mombasa. We do not sell or monetize your personal data.
1. Information We Collect
We adhere to the principle of data minimization. The categories of personal data we collect depend on whether you use CampusKey as a Student or as a Landlord / Property Agency:
- Account Credentials: Full name, verified email address, phone number (for M-Pesa & landlord contact), and hashed password.
- Area Alert Subscriptions: Names of preferred neighborhoods (e.g. Tudor, Nyali, Mshomoroni) selected for new listing alerts.
- Tenancy Records: Verification status of assigned campus accommodation for the active academic semester.
- Business & Owner Profile: Full name, registered company/agency name, business permit URL, license number, and verified contact phone.
- Property Details: Title, category, location/area coordinates, pricing, deposit, room capacities, and photos.
- Payout Credentials: Designated M-Pesa phone number or encrypted direct Paybill credentials for rent/lead payouts.
2. Tenancy & Occupancy Data Policy
To prevent stale listings and guarantee that taken houses are reflected accurately:
- Minimal Tenant Identification:Landlords and property agencies record occupancy using only the tenant's full name, phone number, and email. No invasive academic or financial dossiers are collected or stored.
- Student vs. Non-Student Flexibility: If a tenant is not a university student, landlords can toggle off academic verification constraints while preserving lease expiration tracking.
- Automated Expiry & Relisting Reminders: We retain tenancy end dates to send automated email reminders at the end of the academic semester or lease term, allowing landlords to re-list vacant rooms in one click.
3. How We Use Your Data
- Housing Matching: Releasing landlord contact details to students who express interest, and notifying landlords of student bookings.
- Area Listing Notifications: Dispatching real-time email alerts to students when newly verified listings match their subscribed areas.
- Secure M-PESA Processing: Initiating Safaricom STK Push transactions for platform fees and rent/deposit disbursements.
- Moderation & Safety: Preventing duplicate listings, blocking phone spam in public descriptions, and vetting landlord identity before public verification.
4. Data Security & Encryption
We implement robust administrative and technical safeguards:
- All web sessions are encrypted using TLS 1.3 / HTTPS.
- User passwords are protected using salted BCrypt hashing.
- Landlord direct Daraja M-Pesa secrets are stored as AES-256-GCM encrypted binary blobs.
- Media assets and property images are served securely via Cloudinary CDN.
5. Your Rights Under Kenyan Law
Pursuant to the Kenya Data Protection Act 2019, you retain full rights to access, rectify, or request the deletion of your personal data, as well as the right to unsubscribe from area listing alerts at any time via your profile.