Privacy Policy
This policy explains what the Pata Keja mobile app collects, why, who it is shared with, and how to have it deleted. It covers the Pata Keja Android app and the Pata Keja API that serves it.
What we collect
Your account
You create an account with a phone number and a password. We store:
- Your phone number — this is how you sign in, and it identifies your account.
- Your password, stored only as a one-way hash. We never store or see the password itself.
- A display name, if you set one. For agents this is shown publicly on your listings.
- An email address and a WhatsApp number, only if you choose to add them.
If you list a property (agents and caretakers)
- The listing details you enter: title, description, house type, bedrooms, monthly rent and deposit.
- The property's location — the estate, sub-county and county you select, and that place's map coordinates. This describes the house, not you.
- Photos and any video walkthrough you upload.
If you request an introduction to an agent
- The name and phone number you provide for the introduction. These are shown to that agent so they can call you back.
- The fee amount, the payment status, and the reference our payment provider returns.
How you use the app
- Houses you save to your favourites.
- A view count per listing, so agents can see how much interest a house is getting.
- Any rating you leave after being connected with an agent.
Technical information
- Your IP address, used to rate-limit requests and protect the service from abuse.
- Sign-in tokens, stored in encrypted storage on your own device so you stay signed in.
What we do not collect
Pata Keja does not collect your device's GPS location, does not read your contacts, photos library or files beyond the specific pictures and videos you choose to upload, and contains no advertising or analytics trackers. We do not sell your personal information.
How we use it
- To create and secure your account and keep you signed in.
- To show listings, let you search and filter them, and save your favourites.
- To connect you with an agent after you pay the introduction fee, and to show that agent your callback details.
- To let agents manage their own listings and see the enquiries they receive.
- To take payment for the introduction fee and keep a record of it.
- To keep the service working and to prevent abuse.
Who we share it with
We share only what is needed for the app to work:
- The agent you chose to be introduced to. After the introduction fee is paid, your name and phone number are shown to that agent. An agent's own phone number is likewise only released to you at that point — it is never shown on public listings.
- Cloudinary — stores and delivers listing photos and videos.
- OpenStreetMap (Nominatim) — when an agent searches for a location while creating a listing, that search text is sent to OpenStreetMap to find the real place. Searches are sent from our servers, not from your device.
- Our payment provider — processes the introduction fee. Payment is completed with your mobile money provider; we receive only a reference and a status, never your PIN.
- Our hosting provider — runs the servers and database the app depends on.
- If the law requires it — for example a valid legal request, or to protect the safety and rights of users.
How it is protected
- Passwords are stored as bcrypt hashes, never in readable form.
- Traffic between the app and our servers is encrypted over HTTPS.
- Sign-in tokens are held in your device's encrypted storage and expire; they can be revoked by signing out.
- Agent phone numbers are withheld from public listing data by design.
No service can promise perfect security, but we take reasonable measures to protect your information.
How long we keep it
- Account details are kept while your account exists.
- Listings and their photos/videos are kept while they are published, and can be removed by the agent who posted them.
- Records of introductions and payments are kept as a record of the transaction.
Deleting your account and data
You can ask us to delete your account and the personal information tied to it at any time. Email admin@toolkitforyou.com from the address on your account, or include the phone number you signed up with, and use the subject line "Delete my Pata Keja account".
We will confirm and complete the deletion within 30 days. This removes your account, your display name and contact details, your saved houses and — for agents — your listings and their photos and videos. We may keep a minimal record of completed payments where we are required to for accounting or legal reasons.
Your choices
- You can browse listings without creating an account.
- You can view and change your display name and contact details in the app.
- You can sign out at any time, which removes the sign-in tokens from your device.
- You can ask for a copy of the information we hold about you, or ask us to correct or delete it, using the contact details below.
Children
Pata Keja is intended for adults renting or letting property. It is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has given us their information, contact us and we will delete it.
Changes to this policy
If this policy changes we will update this page and the "last updated" date above. Significant changes will also be announced in the app.
Contact
Questions about this policy, or about your information: admin@toolkitforyou.com. See the contact page for other ways to reach us.