CityDwellingPrivacy Policy
How CityDwelling collects, uses, and protects your personal data — in accordance with the Kenya Data Protection Act, 2019.
We never sell your personal data. Your data is used solely to operate and improve CityDwelling. You can request access, correction, or deletion of your data at any time by emailing privacy@city-dwelling.com.
Introduction
Welcome to CityDwelling. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property search and rental platform (the "Platform").
This policy is governed by the Kenya Data Protection Act, 2019 (KDPA) and its associated regulations. By using CityDwelling, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.
Information We Collect
2.1 — Personal Information
- Name (first and last name)
- Email address
- Password (stored encrypted; we never store plaintext passwords)
- Phone number (optional, if provided)
- Profile preferences and settings
2.2 — Property Search Data
- Search queries and filters (location, price range, property type)
- Properties you view or save
- Property collections you create
- Viewing requests and communications initiated through the Platform
2.3 — Usage & Technical Data
- Pages visited and features used
- Time spent on different sections of the Platform
- Click patterns and navigation behaviour
- Device and browser information (browser type, operating system, screen resolution)
- IP address and approximate location (city/country level only)
2.4 — User-Generated Content
- Community insights, property reviews, and other user submissions you contribute to the Platform
- By submitting content, you consent to it being stored, moderated, displayed, and used to improve the Platform
- You represent that any content you submit does not violate the rights of any third party
How We Use Your Information
We use your information to:
- Provide our services: Enable property searches, save favourites, and facilitate communications between tenants and property owners.
- Personalise your experience: Surface relevant property listings and recommendations based on your stated preferences and behaviour.
- Improve the Platform: Analyse aggregated usage patterns to enhance features and user experience.
- Communications: Send transactional notifications (viewing confirmations, account alerts) and, where you have opted in, promotional communications.
- Security and fraud prevention: Detect, investigate, and prevent fraudulent transactions, abuse, and security incidents.
- Legal compliance: Meet obligations under the KDPA and other applicable laws, and respond to lawful requests from public authorities.
Analytics & Tracking
4.1 Analytics Tracking
We use a variety of third-party analytics (Mixpanel, Posthog, Amplitude) services to understand how users interact with CityDwelling. These 3rd party services may collect page views, navigation patterns, property views, search queries, user interactions, device information, and geographic location at city/country level only.
This data is used solely to improve our service. We do not use it for advertising profiling. For Mixpanel's privacy practices, visit mixpanel.com/legal/privacy-policy.
4.2 Analytics Opt-Out
- Email us at privacy@city-dwelling.com to request opt-out.
- Use browser extensions that block analytics scripts (note: this may affect certain Platform functionality).
4.3 Cookies & Local Storage
We use cookies and browser local storage to maintain your authenticated session, remember preferences, track analytics events, and improve Platform performance.
You can control or disable cookies through your browser settings. Note that disabling cookies may impair core functionality, including the ability to log in.
4.4 Data Retention
Data Sharing & Disclosure
We may share your information with:
- Property owners and landlords: Limited to information necessary to facilitate a viewing or rental enquiry you have initiated.
- Service providers: Third parties processing data on our behalf under contractual data processing agreements, including Mixpanel (analytics), Resend (email), and Paystack (payments). These parties are prohibited from using your data for their own purposes.
- Legal and regulatory authorities: Where required by applicable law, court order, or to protect the rights, property, or safety of CityDwelling, our users, or the public.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.
We never sell your personal data to third parties.
Third-Party Listings & Content
Property listings, photos, descriptions, and associated details displayed on CityDwelling may be provided by third-party landlords, property managers, or developers. CityDwelling does not verify the accuracy, completeness, or legality of third-party listing content.
We are not responsible for any loss or damage arising from reliance on third-party listing content or from any transaction, communication, or dispute between you and a property owner or landlord. Any links to third-party websites are provided for convenience only; we have no control over their content or privacy practices.
Data Security
We implement industry-standard technical and organisational security measures:
- SSL/TLS encryption for data in transit
- Encrypted password storage (hashed; never stored in plaintext)
- Secure cloud infrastructure with access controls
- Regular security reviews and vulnerability assessments
No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and will not be held liable for unauthorised access resulting from circumstances beyond our reasonable control, including your failure to keep login credentials confidential.
Your Data Rights
Under the Kenya Data Protection Act, 2019, you have the right to:
Access
Request a copy of the personal data we hold about you.
Correction
Request correction of inaccurate or incomplete data.
Deletion
Request deletion of your account and associated personal data, subject to legal retention obligations.
Portability
Receive your data in a structured, machine-readable format.
Objection
Object to processing of your data in certain circumstances.
Restriction
Request that we limit how we process your data pending a correction or objection.
Withdraw Consent
Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, email privacy@city-dwelling.com. We will respond within 30 days and may need to verify your identity. If unsatisfied, you may lodge a complaint with the Office of the Data Protection Commissioner of Kenya.
Children's Privacy
CityDwelling is not directed at or intended for persons under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we hold data from a person under 18, we will delete it promptly. If you believe we hold data relating to a minor, please contact us immediately at privacy@city-dwelling.com.
International Data Transfers
Some of our service providers (including Mixpanel, Brevo, and Paystack) may process your data on servers located outside Kenya. Where such transfers occur, we ensure appropriate safeguards are in place — including contractual protections — consistent with the KDPA and applicable cross-border data transfer rules.
Limitation of Liability
To the fullest extent permitted by applicable law:
- CityDwelling is provided on an "as-is" and "as-available" basis without warranties of any kind, express or implied.
- We do not warrant that the Platform will be uninterrupted, error-free, or free of viruses or other harmful components.
- We shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of or inability to use the Platform.
- We are not liable for damages arising from transactions, disputes, or communications between users and third-party property owners or landlords.
- Our total aggregate liability to you for any claim shall not exceed the amount you have paid us (if any) in the 12 months preceding the claim.
Governing Law & Disputes
This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Kenya, including the Kenya Data Protection Act, 2019. Any dispute arising out of or in connection with this Policy that cannot be resolved amicably shall be subject to the exclusive jurisdiction of the courts of Nairobi, Kenya.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on the Platform at least 14 days before changes take effect. Your continued use of CityDwelling after the effective date constitutes acceptance of the revised policy. If you do not agree to the updated policy, you must stop using the Platform.
Contact & DPO
For questions, complaints, or requests relating to this Privacy Policy or our data practices:
Privacy enquiries
privacy@city-dwelling.comSupport
support@city-dwelling.comData Protection Officer
dpo@city-dwelling.comIn accordance with the KDPA, our Data Protection Officer is available at dpo@city-dwelling.com for any data protection enquiries or escalations. We aim to respond to all privacy-related enquiries within 30 days.
By using CityDwelling, you acknowledge that you have read and understood this Privacy Policy. This policy does not constitute legal advice. CityDwelling recommends you consult a qualified legal professional for advice specific to your circumstances.
CityDwelling Limited · Nairobi, Kenya
© 2026 CityDwelling Limited. All rights reserved.