— Privacy
Privacy notice
Last updated: August 2026
Who this is about
mTenure is rent record-keeping software for landlords in Kenya. This notice covers two different things, and it is worth keeping them apart:
- this website, which almost nobody needs to worry about; and
- the mTenure application, which holds real records once you become a customer.
This website
This site sets no cookies. It has no sign-up form, no contact form, no comment box and no login. Nothing you type is collected here, because there is nowhere to type.
We use Cloudflare Web Analytics to count page views. It is cookieless: it does not identify you, does not build a profile, does not follow you to other websites, and stores no personal data. If you tap the WhatsApp button, you leave this site and WhatsApp’s own privacy terms apply to the conversation from that point.
What mTenure holds once you are a customer
About you, the landlord
- Your name, email address and phone number.
- Your business name, postal address and the bank or paybill details that are printed on your tenants’ statements.
- A record of every action taken in your account — who did what, and when.
About your tenants
- Name, phone number, the unit occupied, the rent, deposit and service charge.
- The full history of what was charged and what was paid, plus any maintenance tickets against the tenancy.
- Optionally, if you choose to record them: ID number, a next-of-kin name and family details. These fields are optional and it is your decision whether to collect them.
- Optionally, a scan or photograph of the signed lease agreement, if you upload one. mTenure does not draft, witness or sign that agreement — it fills in a printable copy of your own template, you and the tenant sign it on paper, and the scan is a copy of the signed result.
mTenure has no tenant login and no tenant-facing app. Your tenants are never users of the system, and nothing is ever sent to them by the product itself — every WhatsApp reminder is opened by you, read by you, and sent by you, one at a time.
Why we hold it
Under Kenya’s Data Protection Act, 2019, tenant information is held on the basis of performance of a contract — the tenancy itself — and your legitimate interest in keeping evidence of its terms and of what was charged and paid, for the length of the tenancy and any dispute arising from it.
It is not collected for marketing, profiling, credit scoring, or any purpose beyond running your own account. Nothing is sold. Nothing is shared with advertisers. Your records are never used to compare you with another landlord.
Who is responsible for what
For the information about your tenants, you are the data controller — it is your relationship with them, and requests from a tenant come to you. mTenure is the data processor: we hold and process that information on your instructions, and for no other purpose.
For the information about you as our customer, mTenure is the controller.
Where it is held, and how it is protected
- Records are hosted on Cloudflare’s infrastructure, with the database placed in Cloudflare’s Western Europe region. This is a transfer outside Kenya, and it is named here rather than buried.
- ID numbers, next-of-kin names and family details are encrypted by mTenure before they are written to the database. Someone with direct access to the database cannot read them.
- Each landlord’s account is isolated at the data layer. No account can read another account’s records, and that isolation is re-tested automatically before every release.
- Statements, receipts and lease scans are never given a public or shareable link. They can only be opened from inside a logged-in session belonging to the account that owns them.
- Logging in needs a password and a one-time code sent to your email. There are at most two user accounts per landlord, and every session can be revoked.
- Sensitive personal details are excluded from data exports by default, and are never included in a WhatsApp reminder.
- No third party receives your records. The application itself uses no analytics, no error tracking, no SMS gateway and no external service that could see them — the cookieless page counter described above runs on this marketing website only, and has no connection to it.
How long it is kept
Financial records — charges, payments, statements — are kept for as long as Kenyan law expects records of that kind to be kept, because they are the evidence of what was charged and paid. They are never deleted, and they are never silently edited; a correction is recorded as a new entry alongside the original.
A tenant’s personal details can be permanently and irreversibly removed (“anonymised”) from two years after their tenancy ends. After that their record shows as a former tenant with no way to recover the removed details, while the financial history remains.
A signed lease scan is the one document in mTenure that is ever actually erased. It is deleted when the tenant is anonymised, and it can also be deleted earlier, by you, with a reason recorded. Either way, the fact that a lease existed, who uploaded it, who deleted it, when and why is kept permanently — the product forgets the document, never the transaction.
Rights
Under the Data Protection Act, 2019 a tenant may ask what is held about them, ask for inaccurate details to be corrected, and ask for their personal details to be erased once their tenancy has ended, subject to the retention rules above. Those requests go to their landlord, who is the controller. If you are a landlord and need help answering one, contact us and we will action it on your instruction.
As our customer, you can ask us the same questions about your own details, and you can export your entire dataset yourself, at any time, without asking us.
Changes to this notice
If what mTenure collects, keeps or deletes changes, this page is updated at the same time, not afterwards. The date at the top is the date it was last changed.
Contact
WhatsApp +254 112 456 874
Call +254 112 456 874
hello@mtenure.com