Privacy Policy

1. Introduction

Skaya ("we", "our", "us") provides digital visitor management and access‑control services for residential and commercial properties. We are committed to protecting your privacy and handling your personal data in accordance with the Kenya Data Protection Act (DPA) 2019.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you use our website, mobile applications, or any Skaya services.

2. Data Controller

Skaya Technologies Ltd
Nairobi, Kenya
Email: info@skaya.co.ke
Phone: +254 723 13 60 70

3. Personal Data We Collect

The specific categories of personal data we collect may vary depending on how you use Skaya and the features enabled by your property. Generally, we may collect:

• Information provided during account creation or onboarding
• Information submitted when managing or registering visitors
• Information generated through access‑control actions and security workflows
• Technical and usage information automatically collected when interacting with our platform

As Skaya evolves, the exact data elements collected may change. We will update this Privacy Policy to reflect any material changes.

4. Lawful Basis for Processing

We process personal data under the following lawful bases defined in the Kenya DPA 2019:

• Consent – when users voluntarily provide information
• Performance of a contract – enabling access‑control and visitor management services
• Legal obligation – maintaining security logs required by property policies
• Legitimate interest – improving platform security, preventing fraud, and ensuring safe property access

5. How We Use Personal Data

We use personal data to:

• Facilitate visitor registration and access to properties
• Generate secure access credentials (e.g., OTPs, QR codes)
• Notify tenants, guards, and property managers of access events
• Maintain audit trails and security logs
• Improve platform performance, reliability, and user experience
• Provide customer support
• Comply with legal and regulatory requirements

6. Sharing of Personal Data

We may share personal data only under the following conditions:

6.1 With Property Management

Authorized property managers and security personnel may access relevant data to manage access‑control operations.

6.2 With Service Providers

We use third‑party providers for services such as:

• Communication and OTP delivery
• Cloud hosting and data storage
• Analytics and crash reporting

All providers operate under strict data‑processing agreements.

6.3 Legal Requirements

We may disclose data if required by:

• Court orders
• Law enforcement
• Regulatory authorities

We do not sell personal data.

7. Data Retention

We retain personal data only as long as necessary for the purposes described:

• Visitor logs: retained according to property policy
• Access credentials (e.g., OTPs): deleted automatically after expiry
• User accounts: retained until account deletion
• Audit logs: retained for security compliance

8. Data Security

We implement industry‑standard security measures including:

• Encryption of sensitive data
• Secure access‑credential generation
• Role‑based access control
• Regular security audits
• Encrypted storage
• Automatic session timeouts

9. Your Rights Under Kenya DPA 2019

You have the right to:

• Access your personal data
• Request correction or deletion
• Object to processing
• Request data portability
• Withdraw consent
• Be informed of data breaches

To exercise any rights, contact info@skaya.co.ke.

10. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication
• Session management
• Analytics
• Improving user experience

You may disable cookies in your browser settings, but some features may not function properly.

11. Children's Privacy

Skaya does not knowingly collect data from children under 18 unless provided by a parent/guardian as part of a property's security process.

12. International Data Transfers

Your data may be processed or stored outside Kenya by our cloud infrastructure providers. We ensure that any cross‑border data transfers comply with the Kenya Data Protection Act and applicable regulations.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on our website with an updated "Effective Date".

14. Contact Us

For questions or concerns about this Privacy Policy:

Skaya Technologies Ltd
Email: info@skaya.co.ke
Phone: +254 723 13 60 70