Legal

Privacy policy

Last updated 20 October 2026. This explains what we collect when you use the Jirani app and website, why, and what you can do about it.

In short: we collect what we need to run a marketplace with safe payments: your account details, what you post, your orders and payments, and your chats. We never sell your data, we show no ads, and other members never see your phone number or email.

Who we are

Jirani is operated by LMN ("we", "us"), Kenya. We are the data controller for the personal data described here. Contact us at support@lmn.co.ke.

What we collect

Data	What it is	Why
Account	Your name, phone number, email (if you add one), password (stored only as a secure hash), and if you use Google sign-in, your Google account ID, name and email.	To create your account, sign you in, and confirm your phone with a code.
Profile	Your area, bio, profile photo, the work you do and the help you look for.	To show your public profile and match you with jobs and services near you.
Listings and requests	Services you offer, requests you post, their photos, prices and areas.	To show them to other members.
Orders	Dates, times, the address you give for a job, notes, status and reviews.	To run the booking, escrow and reviews. Your exact address is shown only to the provider you booked, after they accept.
Chat	Messages between you and other members.	To let you agree on details. Contact details typed into chat are hidden automatically.
Payments	The M-Pesa phone number you pay from or withdraw to, amounts, M-Pesa receipt numbers, and for withdrawals the name M-Pesa shows for the receiving number. We never see your M-Pesa PIN.	To take payments, hold them in escrow, pay providers, refund, and keep the records the law requires.
Skill verification	A photo of your ID, proof of your skill (certificates, licences, photos of past work), a licence number and your experience, if you ask to be verified.	To check your skill. These photos are private: only you and our admins can open them, through links that expire after an hour.
Device	A push notification token for your phone, and the device name you sign in from.	To send you notifications you asked for, and to let you see and end your sessions.
Website messages	What you send through the website's forms (name, phone or email, message), and a one-way hash of your network address.	To reply to you, and to stop spam and abuse.
Technical	Your network (IP) address and basic request details in our server logs, kept for a short time.	To keep the service running and secure, and to stop abuse (for example, too many sign-in attempts).

We do not collect your precise location, your contacts, or any advertising identifier, and the website sets no tracking cookies.

Who can see what

Other members see your public profile: your first name and the initial of your surname (for example "Wanjiku K."), photo, area, bio, skills, ratings and reviews, and your listings and requests. Never your phone number or email.
The provider you book also sees the address and notes you give for that job, once they accept it.
Our admins see account details, orders and payments when they need to: to resolve disputes, review verifications, answer support requests and keep the platform safe.

Who we share data with

Only the service providers we need to run Jirani, each for its own part:

Safaricom PLC (M-Pesa): to take payments and send withdrawals.
Africa's Talking: to send the SMS codes that confirm your phone or reset your password.
Google: if you choose Continue with Google, to sign you in.
Expo, Apple and Google: to deliver push notifications to your phone.
Our hosting and email providers: to store data on our servers and deliver email.
Authorities: when the law requires it, or to protect someone's safety.

We do not sell personal data, and we do not share it for advertising.

Our legal basis

Under the Kenya Data Protection Act, 2019, we process your data to perform our contract with you (running your account, orders and payments), to meet legal obligations (financial records), for our legitimate interests (safety, preventing fraud and abuse, improving Jirani), and with your consent where we ask for it (for example, push notifications, which you can turn off in your phone's settings).

How long we keep it

Your account and profile: until you delete your account.
When you delete your account, we wipe your name, phone, email, photo, bio, sign-ins, alerts and verification photos, and take down your listings. Orders, payments and the money ledger stay, without your contact details, because the other person in each order needs them and Kenyan tax and financial laws require us to keep financial records.
Unused photos you uploaded but never posted: deleted after a day.
Server logs: kept for a short time, then deleted.
Website messages: kept while we follow up; ask us and we delete them.

How we protect it

Everything travels over HTTPS. Passwords are stored only as secure hashes. Verification photos are private and open only through short-lived signed links. Access to member data is limited to our admins. We limit and block suspicious traffic, such as repeated sign-in attempts.

Your rights

You can:

see and correct your details in the app (Me → Edit profile and photo);
delete your account in the app (Me → Delete my account) or through our website;
ask us for a copy of your data, to correct it, to delete it, or to stop or limit how we use it;
withdraw consent at any time, for example by turning off notifications.

Write to support@lmn.co.ke; we reply within 30 days. If you are not satisfied, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

Children

Jirani is for adults (18 and over). We do not knowingly collect data from children. If you think a child has an account, tell us and we will remove it.

Changes

If we change this policy, we update the date at the top and, for important changes, tell you in the app.