This policy explains what Chumba collects, why, who can see it, and how to get it deleted. It covers the Chumba website at chumba.co.ke and the Chumba Android app.
Last updated: 28 August 2026 · Applies to: Chumba (chumba.co.ke) and the Chumba app for Android.
Chumba (chumba.co.ke) is a property marketplace operating in Nairobi, Kenya, and is the data controller for the personal data described here under Kenya’s Data Protection Act, 2019. For anything in this policy, write to info@chumba.co.ke.
Account details you give us. Your name, phone number, an optional email address, your account type (seeker, landlord, agent or company), an optional company name and WhatsApp number, and your password (stored only as a cryptographic hash — we never see it).
What you publish. Your listings, their descriptions and prices, the photos and videos you upload, and any location you choose to attach to a property.
Messages. Messages and enquiries you send to other users through Chumba, so we can deliver them and so both sides keep a record of the conversation.
Technical information. Your IP address, browser or app version and basic device information, recorded in ordinary server logs to keep the service secure and working.
The app requests these only at the moment they are needed, and it works without them — declining simply disables that one feature.
Camera. Only to take a photo or video of a property while creating a listing, or to set your profile picture. Nothing is captured in the background, and nothing is uploaded unless you complete the listing.
Location (precise and approximate). Only when you tap to pin a property on the map or to search for places near you. We do not track your location in the background, and we do not build a movement history. The coordinates you attach to a listing become part of that listing.
Notifications. To tell you about activity on your account — a message, an enquiry, a like, a follow, or a comment. You can turn these off in your device settings.
Photos and videos. The app uses Android’s system Photo Picker, so it can receive the specific files you choose without asking for access to your whole gallery — the broad media permissions are deliberately removed from the app. Saving a photo you downloaded from a listing writes only that file to your gallery.
The Chumba app contains no advertising SDK, no analytics or tracking SDK, and no crash-reporting SDK. It does not read your contacts, your calendar, your call log, your SMS messages, or your files outside the ones you pick. It does not track you across other apps or websites, and there is no advertising identifier in it.
To create and secure your account; to verify your phone number by one-time SMS code; to publish, rank and show your listings; to connect you with other users and deliver your messages; to notify you about activity on your account; to detect and prevent fraud, spam and abuse; and to fix problems and improve the service.
Your name, profile and listings are public — that is the point of a marketplace. Your phone and WhatsApp numbers are shown to signed-in users so they can contact you about a listing. Your password, your email address and your server logs are never shown to other users.
We do not sell your personal data, and we do not share it for advertising.
We share the minimum necessary with providers who help us run Chumba: an SMS gateway, to deliver your verification code; an email provider, to deliver notifications; and our hosting provider, which stores the data. They act only on our instructions and may not use your data for their own purposes.
You can delete your account yourself: open Profile → Edit profile and choose Delete my account. This permanently removes your account, listings, photos, ratings and messages. It cannot be undone.
If you would rather we did it, or you can no longer sign in, email info@chumba.co.ke from the address or phone number on the account and we will delete it within 30 days. We may keep a minimal record of a transaction or a report of abuse where the law requires it.
We keep your data while your account is open. When you delete your account, the data above is removed. Ordinary server logs are kept for a short period for security and then discarded. Backups are overwritten on their normal cycle.
Under the Data Protection Act, 2019 you may ask to see the personal data we hold about you, correct it, delete it, restrict or object to how we use it, or receive a copy. Write to info@chumba.co.ke and we will respond within the time the Act allows. You may also complain to the Office of the Data Protection Commissioner.
Chumba is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has created an account, tell us and we will remove it.
Traffic is encrypted with HTTPS, passwords are hashed, and access to the systems holding your data is restricted. No system is perfectly secure, but if a breach affects your rights we will notify you and the Data Protection Commissioner as the Act requires.
Chumba’s servers and backups are operated on our behalf by our hosting provider. Where data is processed outside Kenya, we rely on the safeguards the Act permits.
If we change how we handle your data we will update this page and change the date at the top. Significant changes will be announced in the app.
See also our Terms & Conditions and Community Guidelines.