Privacy notice

Version 2026-07-25 · Last updated 25 July 2026

Rentisha helps Kenyan landlords manage rental property. Doing that means holding personal information about tenants, landlords and caretakers. This notice explains exactly what we hold, why, who can see it, and what you can do about it.

1. Who is responsible for your data

There are two different roles here, and which one applies depends on whose data it is.

• Your landlord is the data controller for tenancy information: your name, ID, photos, rent and payment records. They decide to collect it and they are responsible for it. Rentisha acts as their data processor, providing the software that stores it.
• Rentisha is the data controller for the accounts and billing information of the landlords who subscribe to the platform, and for anything collected through this website.

Rentisha is a business registered in Kenya, business registration number BN-OVS6AR9Z.

Data protection contact: hello@rentisha.co.ke, 0798 783 355.

2. What we collect

If you are a tenant

Information	Why we hold it
Full name and phone number	To identify you, to let you sign in, and so your landlord or caretaker can reach you about your tenancy.
National ID number and photographs of your ID card	To confirm you are who you say you are before handing over a house. Your ID photographs are visible to your landlord only, not to caretakers.
Profile photograph	So staff at your building can recognise you. You can change or remove this yourself in the app.
Where you moved from, next of kin name and phone	Emergency contact and standard tenancy record keeping.
Tenancy records: unit, start date, deposits, rent, water and garbage bills, payments, meter readings, advance balance	To run and account for your tenancy, and to give you an accurate statement of what you owe or are owed.
Your signed tenancy agreement, including scanned pages and your typed signature	It is the contract between you and your landlord. Your typed name and phone are matched against your registered details to confirm it was you who signed.
Move-out records: inspection findings, deductions and the final settlement	So refunds of your deposit can be calculated and evidenced.
A secure one-way scramble (hash) of your PIN	To let you sign in. We never store your actual PIN and cannot see it.

If you are a landlord or caretaker

Your name, phone number, role, the buildings you are assigned to, a hashed PIN, and, for landlords, the account details you enter so tenants know where to pay and the record of your subscription payments to Rentisha.

If you are browsing vacant units

You do not need an account and we do not ask for your name. When you tap to contact a landlord about a listing, we record that an enquiry was made about that unit, along with the area, price and size at that moment. This tells us which kinds of houses people are looking for. It is not linked to you personally. Your actual conversation then happens directly on WhatsApp or by phone, outside Rentisha, under those services' own terms.

The map on vacant.rentisha.co.ke is drawn using map images served by OpenStreetMap, which means your device's IP address is visible to them when the map loads. We do not use advertising cookies or third-party tracking on either site.

3. Our lawful basis for holding it

Under section 30 of the Data Protection Act, 2019 we rely on:

• Your consent, for collecting your ID number, ID card photographs and profile photograph at check-in. Your landlord or caretaker is required to explain this notice to you and record your agreement before that information is collected. The system will not complete a check-in without that record.
• Performance of a contract, for everything needed to actually run your tenancy: bills, payments, meter readings, deposits and the settlement when you leave.
• Legal obligation and legitimate interest, for keeping accurate financial records and an audit trail of who changed what.

4. Who can see your information

• Your landlord sees your full tenancy record, including your ID card photographs.
• Caretakers at your building see what they need to do their job, and only for the buildings they are assigned to. They can be permitted to check tenants in, take meter readings or confirm payments. They cannot view your ID card photographs, only whether one has been uploaded.
• Other tenants cannot see anything about you. This is enforced by the database itself, not only by what the app chooses to show.
• Rentisha staff can access data where it is necessary to support, fix or secure the platform.
• Nobody else. We do not sell personal data, and we do not share it for marketing.

We will disclose information if we are legally required to, for example under a court order.

5. Where it is stored

Rentisha runs on Supabase, which hosts our database and file storage. Their servers are located outside Kenya, so your information is transferred out of the country. Supabase is contractually bound to protect it and to process it only on our instructions, which is the safeguard we rely on for that transfer under section 48 of the Act.

Information travels between your phone and our servers over an encrypted connection. Access is restricted at the database level per user and per organisation, so an account can only ever read the records it is entitled to. PINs are stored only as a one-way hash.

6. How long we keep it

Your landlord decides how long their tenancy records are kept, and the period is set out in the tenancy agreement between you and your landlord. Ask them for a copy if you do not have one. We hold the information for as long as they require it, and for as long as we are ourselves legally required to keep financial records.

• Tenancy, billing and settlement records are kept after you move out so that a later dispute about deposits or payments can still be resolved.
• Identity documents (photographs of your ID card) are deleted when your landlord no longer needs them under your tenancy agreement. You can ask your landlord to delete them sooner.
• Enquiries from the listings site are kept in a form that is not linked to any individual.

7. Your rights

Under the Data Protection Act, 2019 you have the right to:

• be told what personal data we hold about you, and get a copy of it;
• have inaccurate information corrected;
• ask for your data to be deleted, where we are not required to keep it;
• object to how we are using it, or ask us to restrict that use;
• withdraw your consent at any time. Withdrawing consent does not undo what was lawfully done beforehand, and we may still need to keep tenancy and payment records to meet legal and accounting obligations;
• complain to the Office of the Data Protection Commissioner.

8. Children

Rentisha is not intended for anyone under 18. We do not knowingly create accounts for children. If a minor's information reaches us, tell us and we will remove it.

9. Changes to this notice

If we change this notice in a way that affects what we do with your information, we will publish the new version here with a new version number, and tenants will be asked to agree again. The version at the top of this page is the one currently in force. Your landlord's records show which version you agreed to and when.

10. Contact us

Email hello@rentisha.co.ke, or call or WhatsApp 0798 783 355.