Privacy Policy

Mahaba Homes, operated by Omar Mahaba Shelters (“Mahaba Homes”, “we”, “us”), respects the privacy of its users. This Privacy Policy explains how personal information may be collected, used, stored, shared, and protected when you access or use Mahaba Homes. Personal data is handled consistently with applicable Kenyan data-protection requirements, including the Data Protection Act, 2019 and applicable regulations.

Depending on how you use the platform, we may collect:

• Name;
• Email address;
• Mobile number;
• Account information;
• Account role;
• Profile information;
• Property listing information;
• Property photographs and media;
• Support communications;
• Payment and transaction references;
• Subscription information;
• Device, browser, security, and technical information;
• Usage information;
• Verification information;
• Identification/passport information where submitted;
• Agent licence information where submitted;
• Property ownership/title documentation where submitted; and
• Other information you voluntarily submit.

Information may be processed to:

• Create and manage accounts;
• Authenticate users;
• Verify email addresses and mobile numbers;
• Process and reconcile payments;
• Activate and manage subscriptions;
• Calculate subscription expiry;
• Send subscription-expiry reminders;
• Publish and manage property listings;
• Provide messaging functionality;
• Verify landlords and agents;
• Review property submissions;
• Prevent fraud and abuse;
• Protect platform security;
• Provide customer support;
• Maintain and improve Mahaba Homes; and
• Comply with applicable legal obligations.

Mahaba Homes processes personal information only where there is an appropriate lawful basis. Information is collected for specified and legitimate purposes and is not used incompatibly with those purposes.

Information you intentionally submit for inclusion in a public property listing may be visible to visitors or registered users, according to the platform's settings. Please avoid placing unnecessary sensitive personal information inside public descriptions, photographs, or listing media.

Identification documents, passports, licences, title documents, ownership documents, and similar verification materials are private information. They do not automatically appear publicly with property listings. Access is limited to authorized persons and systems where reasonably necessary for verification, security, support, fraud prevention, legal compliance, or another legitimate operational purpose.

Files uploaded to private account areas such as “My Documents” remain private unless you deliberately submit or share them through a feature that clearly identifies the intended recipient and purpose. The platform distinguishes public listing media from private documents.

Private in-app messages are not represented as public content. Messages are stored on our servers and transmitted over encrypted (HTTPS) connections. They are not end-to-end encrypted — this means Mahaba Homes can access message content, for example to deliver, store, synchronize, secure, or manage communications, or where reasonably necessary to investigate abuse, comply with applicable law, protect users, or maintain platform security, subject to applicable privacy requirements.

Payments may be processed through third-party payment providers. Depending on the provider, we may receive:

• Transaction reference;
• Payment status;
• Amount;
• Payment date;
• Payment method information;
• Payer identifier or mobile number where supplied; and
• Other information necessary to reconcile the transaction.

Mahaba Homes does not store card numbers, mobile-money PINs, or other payment credentials — those are handled exclusively by the payment provider. You will never be asked to provide your mobile-money PIN, card PIN, password, or OTP to Mahaba Homes support. Third-party payment providers process information according to their own terms, privacy policies, and legal obligations.

We may use your registered contact information to send service communications relating to:

• Subscription activation;
• Payment confirmation;
• Upcoming subscription expiry;
• Renewal reminders;
• Subscription expiration; and
• Important account or security information.

These operational communications are separate from any optional marketing communications.

Mahaba Homes relies on third-party service providers for functions including:

• Authentication;
• Database infrastructure and hosting;
• Media storage and delivery;
• Email delivery and verification;
• Payment processing;
• Security;
• Analytics; and
• Other operational infrastructure.

Where third parties process personal information on our behalf, appropriate safeguards are used where required by law.

Mahaba Homes may use cookies, local storage, or similar technologies for authentication, security, preferences, functionality, and analytics. Where consent is legally required for non-essential technologies, we will obtain appropriate consent first.

We use reasonable technical and organizational measures intended to protect personal information from unauthorized access, alteration, disclosure, loss, or misuse. No internet-based service can guarantee absolute security. You are responsible for keeping your account credentials secure.

Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected, including:

• Providing services;
• Maintaining accounts;
• Maintaining transaction records;
• Resolving disputes;
• Preventing fraud;
• Security; and
• Compliance with applicable legal obligations.

Different categories of information may have different retention periods.

Subject to applicable Kenyan data-protection law, you may have rights including:

• Being informed about processing;
• Requesting access to your personal data;
• Requesting correction of inaccurate information;
• Requesting deletion where legally applicable;
• Objecting to certain processing;
• Requesting restriction where applicable;
• Exercising applicable data-portability rights; and
• Withdrawing consent where processing relies on consent.

We may need to verify your identity before fulfilling certain requests.

Where account deletion is available, we may delete or anonymize personal information associated with the account, subject to information that may legitimately need to be retained for:

• Legal compliance;
• Transaction records;
• Fraud prevention;
• Security;
• Dispute resolution; and
• Other lawful purposes.

Account deletion does not necessarily require immediate deletion of every record where continued retention is legally permitted or required.

Mahaba Homesis not intended for children who are not legally capable of entering into the relevant property or service transactions. We do not knowingly collect children's personal information except where permitted by law and with any legally required authorization.

Some cloud or technology providers may process information outside Kenya. Where personal data is transferred internationally, appropriate safeguards are used where required by applicable law.

We may update this Privacy Policy as our services, technology, providers, or legal obligations change. The current version of this page always shows its Last Updated date.

Privacy questions and requests can be sent to info@mahabahomes.com.