Legal
Privacy policy
What we collect, why, and how long we keep it — written against the Data Protection Act 2019.
What we collect
Your phone number and name; your national ID and driving licence, and for owners a logbook and insurance certificate; the messages you send through the app; the photographs and readings taken at handover; and metadata about calls and texts placed through our masked line — never their content.
What we do not collect
We do not record call audio and we do not store the text of SMS sent through the masked line. We do not ask for, hold or process your rental payments, so we hold no card or bank details for them.
Why we hold it
To verify that you are who you say you are, so the person on the other side of a rental can make an informed decision; to let the two of you communicate; and to keep an evidence trail that can settle a dispute.
How long we keep it
Document images are deleted once verification resolves. The extracted fields and the outcome are kept, so a decision remains explainable after the image is gone. Handover photographs outlive a booking by long enough to settle a dispute, then go. Records of what happened — bookings, reports, findings — are retained.
How it is protected
ID numbers, licence numbers and KRA PINs are encrypted in our database. Documents and handover photographs are held in private storage and reachable only through short-lived signed links — never a public URL. Staff access is limited by role, every verification and standing decision is recorded with the reviewer's identity, and that record cannot be edited or deleted.
Chat moderation
Messages are scanned for phone numbers, emails and social handles. A match is delivered unchanged and flagged for review with a redacted excerpt — never the whole message. A reviewer opens a flagged thread, not an inbox.
Your rights
Under the Data Protection Act 2019 you may ask what we hold about you, ask us to correct it, or ask us to erase it. On erasure we blank your personal details and close the account; records of what happened survive, keyed to an identifier rather than to your name, because the other party to a rental has an interest in them too.
Contact
Write to info@gokazi.co.ke, or to GoKazi Ltd, P.O. Box 4836-00200, Nairobi.
Registration with the Office of the Data Protection Commissioner is outstanding and must be completed before launch.