Privacy policy

What we collect

• Account details: name, mobile number, username, email if you add one, password (stored as a one-way hash that can't be read back), and a profile photo if you upload one.
• Booking details: the stay or trip, dates, number of people, guest type when the host asks for it, and the pickup point you type for trips.
• Payment details: payment happens on the Kashier payment page. We never receive or store your card number or card details; we keep only the amount, the payment status and the transaction reference.
• Messages: conversations between you and hosts or guests on the platform. Messages are checked automatically to stop phone numbers and contact details being shared off the platform.
• Reviews, favorites and notifications.
• Host details: business name, identity or commercial-registration documents, and payout details.
• Property inquiries: the name, mobile number and message you send to a property owner.
• Device details: a random install ID, operating system, app version, language, and a notification token if you allow notifications.
• Usage data: how often listings are shown and opened, to give hosts statistics and to improve the service. It is not used for targeted advertising.
• IP address and technical logs, to protect against abuse and to rate-limit requests.

The app does not access your location, contacts or microphone. The camera and photos are used only for images you choose (profile photo, listing photos, verification documents).

Why we use it

• To run your account, sign you in and verify your number by SMS.
• To complete bookings and payments, holding the money until the stay is confirmed and then paying the host.
• To let you and the other side of a booking talk, and to send notifications about your account.
• To keep users safe, prevent fraud and verify hosts.
• For support, to improve the platform, and to comply with the law.

Who we share it with

• The host you book with: your name, the booking details and the messages you send them. Guests likewise see the host's name and business.
• Kashier, to process payments on its secure page.
• Our SMS provider, to send verification codes to your number.
• Notification services (Expo and Google Firebase), to deliver notifications to your device.
• The hosting provider our servers run on.
• Authorities, when the law requires it.

We do not sell your data or share it with advertisers.

How long we keep it

We keep your account data while your account is active. When you delete your account we immediately erase what identifies you, and keep only booking and payment records for as long as tax and accounting law requires, without your name or number. The account deletion page has the details.

Copies may remain in backups for a limited time before they are overwritten automatically.

Security

Connections to our servers are encrypted (HTTPS), passwords are stored hashed, and your sign-in on mobile is kept in the device's secure storage. You can sign out of every device at any time from security settings.

Your rights

• Edit your details: from your profile in the app or on the website.
• Delete your account: directly in the app or on the website, or by contacting us.
• Ask for a copy of your data or ask about it: contact us using the details below.

Children

The platform is for people aged 18 and over, and we do not knowingly collect data from anyone younger.

Changes to this policy

If we change this policy we update the date at the top of the page, and tell you in the app if the change is significant.