Privacy Policy

Effective Date: January 01, 2026

Crib Index (“Crib Index,” “we,” “our,” or “us”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, process, use, store, and share your personal information when you access or use our website, mobile applications, and services (collectively, the “Services”). By using our Services, you consent to the practices described herein.

1. Information We Collect

We may collect the following types of information:

1.1 Personal Information You Provide
  • Name, email address, phone number, physical address
  • Account credentials (username, password)
  • Property details, images, and descriptions submitted for listings
  • Payment and billing information
1.2 Information Collected Automatically
  • IP address, device type, browser type, operating system
  • Usage data, such as pages visited, time spent, and click patterns
  • Cookies and similar tracking technologies
1.3 Information from Third Parties
  • Referrals, public records, or third-party sources for verification purposes

2. How We Use Your Information

We use your personal information for the following purposes:

  • To provide, maintain, and improve our Services
  • To process property listings, payments, and subscriptions
  • To communicate with you, including responding to inquiries and providing updates
  • To prevent fraud, unauthorized access, or illegal activities
  • To comply with legal obligations under Kenyan law, including tax and regulatory requirements
  • For analytics and market research to enhance our Services

3. Legal Basis for Processing

Under the Kenya Data Protection Act 2019, we process personal information based on the following legal grounds:

  • Consent: You voluntarily provide information to use our Services
  • Contract: Processing is necessary to perform the Services you requested
  • Legal Obligation: Compliance with applicable Kenyan laws
  • Legitimate Interests: Protecting our Services, improving user experience, and preventing fraud

4. Sharing Your Information

We do not sell or rent your personal information. We may share your information in the following circumstances:

  • With service providers and partners who assist in operating the Services (e.g., payment processors, cloud hosting)
  • If required by law, court order, or regulatory authority
  • To protect our legal rights, safety, and property, or that of our users
  • In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement reasonable administrative, technical, and physical measures to protect your personal information from unauthorized access, loss, misuse, or alteration.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements.

Once no longer required, your personal data will be securely deleted or anonymized.

7. Cookies and Tracking Technologies

We use cookies, analytics, and similar technologies to:

  • Improve user experience
  • Track usage patterns and website performance
  • Deliver relevant content and advertisements

You can disable cookies via your browser settings, but some features of the Services may not function properly.

8. Children’s Privacy

Our Services are not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If we learn we have collected data from a minor, we will delete it immediately.

9. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policies of any third-party sites you visit.

10. International Transfers

Personal data may be transferred and stored outside Kenya, where data protection laws may differ. We ensure that transfers comply with applicable law and take reasonable safeguards to protect your data.

11. Whistleblowing & Fraud Reporting

11.1 Purpose of Reporting

Crib Index provides a whistleblowing and reporting mechanism that allows users to report suspected fraud, misconduct, or unethical behavior related to property listings, agents, or use of the Services.

This system is designed to enhance transparency, protect users, and maintain the integrity of the platform.

11.2 Information Collected Through Reports

When you submit a report, we may collect:

  • Details about the reported listing, property, or agent
  • Description of the suspected wrongdoing
  • Supporting evidence (e.g., images, documents, screenshots)
  • Contact information (if voluntarily provided)

Reporting may be done anonymously, and providing personal data is optional.

11.3 How We Use Whistleblowing Data

Information submitted through this system may be used to:

  • Investigate and verify reported incidents
  • Take enforcement actions (including listing removal or account suspension)
  • Prevent fraudulent or harmful activities
  • Improve platform safety and user protection mechanisms

We do not use whistleblowing data for marketing purposes.

11.4 Confidentiality

We treat all whistleblowing reports with strict confidentiality:

  • Access is limited to authorized personnel only
  • We do not disclose the identity of a reporter without consent, unless required by law
  • Anonymous reports are handled with equal seriousness
11.5 Legal Basis for Processing

Whistleblowing data is processed under:

  • Legitimate interest in maintaining a secure and trustworthy platform
  • Compliance with legal obligations
  • Protection of users and prevention of fraud
11.6 Data Sharing

We do not sell or share whistleblowing data for commercial purposes.

However, information may be disclosed:

  • To comply with legal obligations or lawful requests
  • To investigate suspected fraud or criminal activity
  • To protect the rights, safety, or property of users or the public
11.7 Data Retention

Whistleblowing reports are retained only for as long as necessary to:

  • Complete investigations
  • Comply with legal and regulatory obligations
  • Resolve disputes and enforce our policies
11.8 Responsible Use of Reporting System

Users are expected to provide accurate and truthful information.

Submitting false, misleading, or malicious reports may result in appropriate action, including restriction of access to the Services.

11.9 Relationship with Whistleblowing Policy

This section should be read together with our Whistleblowing Policy, which provides additional details on reporting procedures and investigation processes.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated on our website or by email. Your continued use of the Services after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, complaints, or requests regarding this Privacy Policy, you may contact us:

We will make reasonable efforts to respond to inquiries in a timely manner.