Privacy Policy
Last updated 12 November 2026. Written with Kenya’s Data Protection Act, 2019 in mind. Please have it reviewed before launch.
What we collect
- Account details: name, phone number, password (stored only as a secure hash) and, if you add it, your email.
- Auntie profiles: the details you enter, such as display name, optional photo, age range, optional self-described ethnicity, neighbourhood, work preferences, expected salary, languages, experience, skills, bio, references and your private phone number.
- Payments: the M-Pesa phone number used, amount, status, M-Pesa receipt number and transaction references. We never see your M-Pesa PIN.
- Consent records: the version of the consent or acknowledgement text you accepted and when you accepted it.
- Engagements, reviews and reports you submit.
What’s public and what stays private
- Public on a live listing: display name, photo, age range, neighbourhood and preferred areas, service type, availability, expected salary and pay period, languages, experience, skills, training, driving details, bio, reference summaries the referee agreed to, average rating and reviews. Ethnicity appears only if the auntie chooses to show it, and it’s never used for search or ranking.
- Shared only after payment: an auntie’s phone number, and only with the employer account that paid to unlock it.
- Never shared publicly: referees’ phone numbers and emails, account emails, M-Pesa numbers and payment details. These are kept out of public pages, search results, link previews and analytics.
How we use it
- To run the platform: show listings, process payments, unlock numbers, extend listings and keep payment records.
- To keep people safe: moderate listings and reviews, investigate reports and resolve disputes.
- To meet legal and accounting requirements.
We don’t sell personal data.
Who we share it with
- Safaricom (M-Pesa), to process payments.
- Hosting and database providers that store data on our behalf under contract.
- Authorities, where the law requires it.
How long we keep it
Profiles and ratings are kept while your account exists, including after a listing expires, so you can renew. Payment and consent records are kept as long as required for accounting and legal purposes.
Your rights
You can ask to access, correct or delete your personal data, object to processing, or withdraw consent. Aunties can unpublish or withdraw publication consent instantly from their dashboard. For anything else, email support@example.com. You can also complain to the Office of the Data Protection Commissioner.
Security
Passwords are hashed, sessions use secure cookies, M-Pesa credentials stay on our servers, and access to private data is checked on the server for every request.