Overview
Kodi Ltd ("Kodi", "we", "us") provides property management software for landlords, property managers, estates, caretakers, vendors, and tenants in East Africa. This Privacy Policy applies to our websites, dashboards, portals, and related services (the "Services").
By creating an account or using the Services, you agree to the practices described here. If you do not agree, please do not use the Services.
Information we collect
Account details
Name, email address, phone number, password (stored hashed), organization name, role, and preferences you set during onboarding or in settings.
Property & operations data
Properties, units, leases, tenants, invoices, payments, maintenance requests, vendor records, communications metadata, and accounting journals you or your team enter into the platform.
Usage & device data
Log data such as IP address, browser type, pages viewed, approximate location derived from IP, and diagnostic events needed to keep the Services reliable and secure.
How we use information
- Provide, operate, and improve the Services
- Authenticate users and enforce role-based access within your organization
- Generate invoices, match payments, send receipts, and produce statements or reports you request
- Power optional AI features using the context you authorize within your organization
- Communicate product updates, security notices, and support responses
- Detect abuse, prevent fraud, and comply with law
We do not sell personal data. We do not use tenant or landlord financial records to train public AI models.
Payments & M-Pesa
When you connect paybill or STK payment flows, payment providers (such as Safaricom M-Pesa) process transaction data under their own terms. We receive confirmation payloads needed to reconcile payments to invoices — for example amount, reference, timestamp, and payer identifiers provided by the payment rail.
Kodi is not a bank. We do not store full card PAN data. Keep your paybill credentials and API secrets confidential; you remain responsible for access you grant inside your organization.
Retention & security
We retain account and operational records for as long as your organization remains active and as needed for accounting, dispute resolution, and legal obligations. You may request deletion of an organization subject to retention requirements (for example unpaid invoices or statutory records).
We use industry-standard safeguards including encryption in transit, access controls, and least-privilege roles. No method of transmission or storage is 100% secure; please use strong passwords and keep invitations limited to people you trust.
Your rights
Depending on applicable law (including Kenya's Data Protection Act), you may have rights to:
- Access personal data we hold about you
- Correct inaccurate information
- Request deletion or restriction, where applicable
- Object to certain processing
- Export a copy of your data in a portable format
Organization admins control most operational records for their portfolio. Tenants using public invoice links receive only the statement data necessary to view and settle balances.
Children
The Services are intended for business and adult users. We do not knowingly collect personal information from children under 18. If you believe a child has provided data, contact us and we will take appropriate steps to delete it.
Changes to this policy
We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice through the Services or email where appropriate. Continued use after changes become effective constitutes acceptance of the updated policy.
Contact us
Questions about privacy, data access, or deletion requests can be sent to: