Who this policy covers
This policy applies to KuriaHub's website, installed web app and Android app experience. KuriaHub operates the platform from Kenya.
- Privacy questions and data-rights requests may be sent through Contact Support.
- Account deletion requests may be submitted through the public Data Deletion page.
Account and profile data
KuriaHub may collect a name, username, email address, phone number, profile photograph, authentication details, seller status and account preferences.
- Passwords are stored using protected authentication methods rather than displayed as readable text.
- Google sign-in may provide basic account information when a user chooses that option.
Listings and marketplace activity
KuriaHub may process listing titles, descriptions, prices, locations, categories, photographs, availability, saved listings, interests, orders, reviews and seller information.
- Information deliberately posted in a public listing or seller page can be viewed by other users.
- Do not post private or sensitive information that is unnecessary for a listing.
Messages, support and safety records
KuriaHub may process buyer-seller messages, notifications, reports, support requests and moderation records.
- Messages are intended for the participants, but authorized administrators may access relevant records for support, fraud prevention, safety, disputes or legal compliance.
- Reported evidence may be preserved while an issue is investigated.
Technical and usage information
KuriaHub may process device, browser, IP address, session, security-log, error, page-request and feature-use information needed to operate, secure and improve the service.
- Cookies or similar storage may keep users signed in, remember preferences and support security.
- KuriaHub should collect only information reasonably needed for stated purposes.
Why information is used
Information is used to create and secure accounts, publish listings, connect users, provide support, administer sellers, prevent abuse, maintain records and improve reliability.
- Processing may be based on consent, performance of the user agreement, legal obligations or legitimate interests such as fraud prevention and network security.
- Information should not be used for an unrelated incompatible purpose without an appropriate lawful basis.
Payments and subscriptions
When a payment feature is enabled, KuriaHub and an approved payment provider may process a phone number, amount, plan, transaction reference, payment status and related reconciliation records.
- KuriaHub does not require users to disclose a bank PIN, M-PESA PIN or OTP.
- Payment, subscription, refund and fraud-prevention records may be kept where reasonably necessary.
Optional image processing
When a seller chooses photo polishing, the selected image and processing instructions may be sent to a specialist image-processing provider solely to perform the requested feature.
- Do not submit an image containing unnecessary private information.
- The original and processed image may be retained with the listing until removed or no longer needed.
Service providers and sharing
KuriaHub may use hosting, authentication, email, security, payment, backup and image-processing providers. They may process only the information needed to deliver their service or meet legal duties.
- Information may also be disclosed with consent, to protect users, to investigate fraud, to enforce rules, or where lawfully required.
- KuriaHub does not sell passwords, PINs or private messages.
Processing outside Kenya
Some technology providers may process or store information outside Kenya. KuriaHub will seek reasonable legal, contractual and security safeguards appropriate to the service and the data involved.
- Using an international provider does not remove KuriaHub's responsibility to handle personal data lawfully.
Security
KuriaHub uses measures such as HTTPS, access controls, protected authentication, backups, logging, rate limits and restricted administrative access.
- No internet service can guarantee absolute security.
- Users should use a strong password and immediately report suspected account compromise.
Retention
Personal data is kept for as long as reasonably needed for the account, service, transaction, safety, dispute, backup, fraud-prevention or legal purpose for which it is processed.
- Data no longer required should be deleted, anonymised or securely disposed of.
- Different records may have different retention periods because their purposes and legal requirements differ.
Your data rights
Subject to applicable Kenyan law, a user may request information about processing and may seek access, correction, restriction, objection, portability or deletion of personal data.
- KuriaHub may verify identity before acting on a request.
- A request may be limited where retention or processing is required by law, safety, another person's rights or a legitimate legal claim.
- A dissatisfied person may contact the Office of the Data Protection Commissioner where applicable.
Account and data deletion
Use the public Data Deletion page to request deletion of a KuriaHub account and associated personal data. The request starts a secure review rather than immediate automatic erasure.
- Profile data, active listings, listing media, saved listings and ordinary account activity may be deleted or anonymised.
- Limited payment, completed-order, safety, dispute, fraud-prevention or legal records may remain where reasonably necessary.
Children and guardians
KuriaHub is a general marketplace and is not designed specifically for children. A person who cannot lawfully manage an account or transaction should use the service only with a parent or guardian.
- A guardian may contact support regarding a child's information.
- Do not knowingly post a child's sensitive information without proper authority and necessity.
Policy changes and contact
This policy may be updated when KuriaHub's features, providers, legal duties or data practices change. The effective date will be revised and material changes will be communicated where reasonably practical.
- Use the Contact Support link in the KuriaHub footer for privacy questions.
- Use the Data Deletion link for account or personal-data deletion requests.