Privacy Policy

Kezavi ("we", "us") provides a property and tenancy management platform for landlords, tenants, and caretakers in Uganda. This policy explains what personal data we collect, why we collect it, and how it is handled.

We collect the following categories of information:

• Account information: name, phone number, email address, and password (stored as a one-way hash, never in plain text).
• Property and lease data: addresses, unit details, rent amounts, lease terms, and payment records you or your landlord/caretaker enter.
• Identity and supporting documents: national ID, passport, or letters a tenant chooses to upload for verification purposes.
• Photos: property listing images and complaint/maintenance photos you upload.
• Communications: messages sent through the in-app messaging feature, complaints, and reviews.

We do not use advertising trackers or sell any data to third parties. We do not currently run analytics or ad-tracking scripts on this site.

• To operate core features: leases, invoicing, payment records, and receipts.
• To notify you about rent due dates, messages, complaints, and account activity.
• To let landlords verify a tenant's uploaded documents and rental history.
• To detect and prevent fraud, abuse, and unauthorized access.

We share data only with the service providers needed to run Kezavi:

• Supabase — stores uploaded photos and documents.
• Google — if you choose to sign in with Google.
• Our hosting provider — runs the application and database.

Within the platform, a tenant's uploaded documents and rental history are visible only to the landlord(s)/caretaker(s) they have an active or prospective lease relationship with — not to unrelated landlords browsing the public listings.

We retain account and lease records for as long as your account is active and for a reasonable period afterward to satisfy record-keeping, tax, and dispute-resolution needs. You may request deletion of your account as described below, subject to records we are required to keep for legal or financial reasons (e.g. payment history).

Consistent with Uganda's Data Protection and Privacy Act, 2019, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data, subject to section 5.
• Withdraw consent for optional features (e.g. Google sign-in) at any time.

To exercise any of these rights, contact us using the details in section 10.

Passwords are hashed with bcrypt and never stored in plain text. Access to landlord, tenant, and caretaker data is restricted by role — a user can only see the properties, leases, and documents they are actually party to. We apply rate limiting to authentication endpoints to reduce the risk of automated attacks. No system is perfectly secure, and we encourage you to use a strong, unique password.

Kezavi is intended for adults entering into or managing tenancy agreements. It is not directed at children under 18, and we do not knowingly collect data from them.

We may update this policy as the product evolves. Material changes will be reflected by updating the "Last updated" date above.

Questions about this policy or your data can be sent to privacy@kezavi.com.