Privacy Policy

1. Introduction

Welcome to MyHood Businesses ("we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").

By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the App.

2. Information We Collect

2.1 Personal Information You Provide

Data Type	Purpose
Full Name	Account creation, profile display
Email Address	Authentication, account recovery, communications
Phone Number	Account verification, M-Pesa payments, seller contact
Password	Account authentication (stored securely, never in plaintext)
Government ID / Passport	KYC (Know Your Customer) verification for sellers
Selfie / Photo	KYC identity verification for sellers
Business Registration Documents	Seller verification

2.2 Information Collected Automatically

Data Type	Purpose
Precise Location (GPS)	Proximity-based search, nearby shops and services
Approximate Location	Regional content display
Search History	Personalizing recommendations and in-app promotions
App Usage Data	Analytics, improving app performance
Device Information	Crash reporting, compatibility
Performance Data	App stability monitoring via Firebase Performance

2.3 Financial Information

Data Type	Purpose
M-Pesa Phone Number	Processing mobile money payments
Transaction History	Order tracking, escrow management, receipts
Card Payment Data	Processed securely via Flutterwave (we do not store card numbers)

2.4 User-Generated Content

Data Type	Purpose
Chat Messages	In-app communication between buyers and sellers
Product Listings	Marketplace functionality
Reviews & Ratings	Community trust and feedback
Photos/Images	Product listings, profile pictures

3. How We Use Your Information

We use the collected information to:

• Provide our services: Enable marketplace transactions, bookings, and communication between buyers and sellers.
• Process payments: Facilitate M-Pesa STK Push, Flutterwave card payments, escrow services, and seller payouts.
• Verify identities: KYC verification for sellers to ensure marketplace trust and safety.
• Personalize experience: Show relevant products, services, and in-app promotions based on your search behavior and location.
• Communicate with you: Send order updates, booking confirmations, and important service notifications.
• Ensure safety: Content moderation, fraud prevention, and enforcement of our Terms of Service.
• Improve our services: Analytics and performance monitoring to enhance app functionality.

4. How We Share Your Information

We do not sell your personal information. We may share your data with:

Recipient	Data Shared	Purpose
Safaricom (M-Pesa)	Phone number, transaction amount	Payment processing
Flutterwave	Transaction details	Card payment processing
Firebase (Google)	Analytics data, crash reports, performance metrics	App infrastructure and analytics
Other Users	Name, shop info, listings, reviews	Marketplace functionality
Law Enforcement	As required by law	Legal compliance

5. Data Storage and Security

• All data is stored securely using Firebase Cloud Firestore with comprehensive security rules including role-based access control.
• Authentication is managed by Firebase Authentication with industry-standard encryption.
• Sensitive credentials are stored using AES-256-GCM encryption via Flutter Secure Storage backed by Android Keystore / iOS Keychain.
• Firebase App Check is enabled to protect our backend from abuse.
• KYC documents are stored in Firebase Storage with owner-scoped access rules.
• Financial operations are processed through secure Cloud Functions — no sensitive credentials exist on the client side.

6. Data Retention

• Account data: Retained while your account is active. Deleted upon account deletion request (subject to a 30-day grace period).
• Transaction records: Retained for 7 years as required by Kenyan tax and financial regulations.
• Chat messages: Retained while the conversation exists. Deleted when either party deletes the conversation.
• KYC documents: Retained while your seller account is active. Deleted upon account deletion.
• Analytics data: Aggregated and anonymized data may be retained indefinitely for service improvement.

7. Your Rights

You have the right to:

• Access your personal data collected by the App.
• Correct inaccurate personal information via your profile settings.
• Delete your account and associated data through the in-app account deletion feature (Settings > Delete Account).
• Withdraw consent for data processing (which may limit your ability to use certain features).
• Export your data upon request by contacting us.
• Opt out of personalized in-app promotions.

8. Children's Privacy

Our App is not directed at children under the age of 18. We do not knowingly collect personal information from children. Given the financial transaction features of our platform, users must be at least 18 years of age. If we discover that a child under 18 has provided us with personal information, we will delete that information immediately.

9. In-App Promotions and Personalization

We use your search history and browsing behavior to personalize in-app promotional content ("house ads") that highlight platform features and seller offerings. This is internal personalization only — we do not use third-party advertising networks or share your behavioral data with external advertisers.

You can manage your personalization preferences in the App settings.

10. Location Data

We collect precise location data to provide proximity-based features (nearby shops, services, and accommodations). Location access is requested at runtime with your explicit permission. You can revoke location access at any time through your device settings, though this may limit certain features.

11. Third-Party Services

Our App integrates with the following third-party services, each governed by their own privacy policies:

• Firebase / Google Cloud Platform: Google Privacy Policy
• Safaricom M-Pesa: Safaricom Privacy Policy
• Flutterwave: Flutterwave Privacy Policy
• Google Maps: Google Maps Privacy

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via email. Your continued use of the App after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

• Email: privacy@myhoodbusinesses.com
• In-App: Settings > Help & Support

14. Governing Law

This Privacy Policy is governed by the laws of the Republic of Kenya, including the Data Protection Act, 2019.