Tenari is operated by InfraWatchKenya ("Tenari", "we", "us"), based in Nairobi, Kenya. For any privacy question or request, contact us at info@tenariventures.com. Where the Data Protection Act, 2019 applies, InfraWatchKenya is the data controller for account and website data, and a data processor for the tenant/guest/owner records that a subscribing organisation ("your landlord, agent or host") enters into its own workspace.
| Category | Examples | Why |
|---|---|---|
| Account & identity | Name, email, phone number, password (hashed), organisation name, role | Create and secure your login; identify who did what |
| Sign-in data | Google account email/profile (if you use "Continue with Google"), WhatsApp phone number (if you use OTP sign-in) | Authenticate you; we receive only your name, email and profile picture from Google, never your Google password |
| Property & operational | Units, tenants/owners/guests, leases, bookings, meter readings, maintenance | Run the management features you subscribed to |
| Financial | Rent/charge invoices, payments, M-Pesa references, balances, statements, payroll | Record income/expenses and produce accounts; reconcile M-Pesa payments |
| Communications | WhatsApp/SMS messages you send through Tenari, delivery status, opt-in/opt-out | Send receipts, reminders and notices you initiate |
| Technical | Device/browser type, IP address, log and error data | Security, troubleshooting, service reliability |
We do not intentionally collect sensitive personal data (health, religion, political views, etc.). Please do not enter such data into free-text fields.
We do not sell your personal data and we do not use it for third-party advertising.
We process personal data where it is necessary to perform our contract with you, to comply with a legal obligation, for our legitimate business interests (kept in balance with your rights), or with your consent (for example, WhatsApp/SMS marketing notices, which require opt-in and can be withdrawn at any time by replying STOP).
We share personal data only with service providers that help us run Tenari, under contract and only for that purpose:
We may also disclose data if required by law, or to protect the rights, safety and property of Tenari, our users or the public. Data entered by a subscribing organisation belongs to that organisation, which is responsible for how it uses it within its own workspace.
Some providers above process data on servers outside Kenya. Where that happens, we rely on the providers' recognised safeguards and their contractual data-protection commitments, consistent with the DPA 2019.
We keep personal data for as long as your organisation's account is active and as needed to provide the service, then for the period required to meet legal, accounting and tax obligations, after which it is deleted or anonymised. You may request deletion of your account data subject to those legal retention limits.
Data is transmitted over TLS (256-bit) and stored in access-controlled systems with row-level isolation so each organisation sees only its own records. Passwords are hashed and never stored in plain text. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
Under the DPA 2019 you have the right to be informed, and to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise any of these, email info@tenariventures.com. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.
Tenari is a business tool and is not intended for children under 18. We do not knowingly collect their data.
We may update this policy; the "Last updated" date above shows the latest version, and material changes will be notified in the app or by email.