Privacy Policy

• Account details — name, email, phone number, and password.
• Identity verification — a government ID image and a selfie, used to confirm you are who you say you are. These are reviewed for trust and safety.
• Listings & photos — property details, addresses, and images you upload as a host; a profile photo.
• Location — listing locations and search areas, to show relevant nearby stays.
• Bookings & payments — reservation details and payment status. M-Pesa payments are processed by our payment partner (Safaricom Daraja); we store only display-safe details.
• Messages — communications between guests and hosts made through Stays.
• Device & usage data — app interactions and basic device information used to operate and improve the service.

To create and manage your account; list, search, and book stays; process payments and host payouts; verify identity and prevent fraud; enable messaging; provide support; send service notifications; and comply with legal obligations.

• Between guests and hosts — the details needed to complete a booking (e.g. name and relevant contact/booking info).
• Payment processors — Safaricom M-Pesa (Daraja), to process payments and payouts.
• Service providers — hosting and infrastructure providers that run the platform on our behalf, under confidentiality obligations.
• Legal — where required by law or to protect the rights and safety of our users.

We do not sell your personal information.

We keep personal information for as long as your account is active and as needed to provide the service, resolve disputes, and meet legal and accounting requirements. You can request deletion of your account (see your rights below).

We use industry-standard measures including encrypted connections (HTTPS), hashed passwords, and access controls. No method of transmission or storage is completely secure, but we work to protect your information.

You may access, correct, or delete your personal information, and withdraw consent where applicable, by contacting us. We will respond in line with applicable Kenyan data-protection law (the Data Protection Act, 2019).

Stays is not intended for anyone under 18, and we do not knowingly collect information from children.

We may update this policy from time to time. Material changes will be posted here with a revised “last updated” date.

Questions or requests? Email support@stays.co.ke.