LipaBoma – Privacy Policy

1. Introduction

LipaBoma ("Platform", "Service") is a property management and rent automation system owned and operated by Helium Technologies Limited ("Company", "we", "our", "us"). This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you use LipaBoma across Kenya and East Africa.

By registering, accessing, or using the LipaBoma platform, you consent to the practices described in this Policy.

2. Legal Basis & Jurisdiction

This policy is designed to comply with:

• Kenya Data Protection Act, 2019 (DPA)
• Office of the Data Protection Commissioner (ODPC) Guidelines
• Relevant East African data-protection standards
• International privacy principles where applicable (GDPR-influenced practices)

Helium Technologies Limited is the Data Controller for all personal data processed on LipaBoma.

3. Information We Collect

We collect the following categories of data:

3.1 User Account Information

• Full Name
• Email address
• Phone number
• Gender (optional)
• Password
• National ID / Passport number (when required)

3.2 Property & Tenancy Information

• Rental unit details
• Lease agreements
• Move-in/move-out dates
• Payment history
• Uploaded documents (IDs, lease forms)

3.3 Financial Information

• M-Pesa phone number
• Bank details for payouts
• Wallet balances
• Transaction confirmations
• Payment receipts
• Reconciliation data from payment gateways

We never store your card PIN, M-Pesa PIN, or bank login credentials.

3.4 System & Device Data

• IP address
• Browser type
• Device identifiers
• Usage logs
• Geo-location (if enabled for fraud checks)

3.5 Communications

• Emails
• In-app messages
• Support requests
• SMS notifications

4. How We Use Your Information

We use collected data to:

5. Sharing of Data

We do not sell user data. We may share data with:

5.1 Authorized Third Parties

• Payment processors (e.g., M-Pesa, banks)
• SMS/email service providers
• Identity verification partners
• Cloud hosting providers

5.2 Property Managers / Owners

Tenant information may be shared with their respective landlord/property manager only as necessary for tenancy administration.

5.3 Legal & Regulatory Bodies

We may disclose information if required by:

• ODPC
• Courts
• Law enforcement

6. Wallet Services & Rent Payouts

Landlords and property owners have access to a LipaBoma Wallet, allowing them to:

• Hold rent proceeds
• Request withdrawals anytime
• View statements

Data relating to wallet transactions is retained securely and only used to fulfil financial operations and regulatory compliance.

7. Cross-Border Data Transfer

If LipaBoma servers or partners store data outside Kenya, Helium Technologies Limited ensures:

• ODPC cross-border guidelines are followed
• Equivalent data-protection safeguards exist

8. Data Retention

We retain:

• Active account data — as long as the user maintains an account
• Financial transactions — 3 years (for audit requirements)
• Logs — 12–24 months
• Deleted accounts — anonymized within 90 days

9. Security Measures

We implement:

• SSL encryption
• Tokenized payment processing
• Server-side firewalls
• Two-factor authentication (optional)
• Continuous monitoring
• Role-based access controls

No system is 100% secure, but Helium Technologies Limited takes all reasonable steps to protect user data.

10. Your Rights

Users have the right to:

• Access their data
• Request corrections
• Delete their account
• Withdraw consent
• File complaints with ODPC

11. Children's Privacy

LipaBoma is not intended for individuals under 18 years.

12. Updates to This Policy

We may update this policy occasionally. Changes will be posted on the website with a revised effective date.

13. Contact Information