Privacy Policy

1. Introduction

Rumia is a hostel discovery platform operated by Stratnovo, a technology company registered in Kenya. This Privacy Policy explains how we collect, use, and protect information when you use Rumia to find student accommodation near Dedan Kimathi University of Technology (DeKUT) in Nyeri, Kenya. By using Rumia, you agree to the practices described in this policy.

2. Information We Collect

3. How We Use Your Information

• Display relevant hostel listings based on your search and location preferences
• Connect you with student agents when you initiate contact
• Send platform notifications and updates (WhatsApp or email)
• Improve search results, listing quality, and platform performance
• Detect and prevent fraudulent listings or abuse

We do not use your information for unrelated advertising.

4. Information Sharing

• When you choose to contact an agent through Rumia, your name and contact information are shared with that agent so they can respond to your enquiry.
• We do not sell your personal data to third parties. We may share data with:

• Infrastructure providers (Supabase for database hosting, Cloudflare for storage) under strict data processing terms
• Analytics tools to understand platform usage in aggregate
• Law enforcement if required by Kenyan law

5. Data Storage and Security

Your data is stored on Supabase-hosted infrastructure with industry-standard security measures including encryption at rest and in transit. Access to personal data is restricted to authorised Stratnovo personnel only. No system is completely secure. If you suspect unauthorised access to your account, contact us immediately.

6. Cookies

• Keeping you logged in (session cookies)
• Understanding how users navigate the platform (analytics)

You can disable cookies in your browser settings, though some features may not work correctly.

7. Your Rights

• Request a copy of the data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data

To exercise any of these rights, email privacy@rumia.co.ke. We will respond within 14 days.

8. Children's Policy

Rumia is intended for university students aged 18 and above. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will remove their account.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of Rumia after changes are posted constitutes your acceptance of the updated policy.

10. Contact