Legal

Privacy Policy

Last updated: 12 July 2026

This Privacy Policy explains how Dutto Homes collects, uses, and protects your personal information when you use our platform to book or host stays across Kenya.

1. Information we collect

• Account information: name, email, phone number, and role (guest, host, or admin).
• Booking information: check-in/check-out dates, guest counts, and payment status.
• Payment information: M-Pesa and Airtel Money numbers used for transactions and payouts, and card payment confirmations from our payment processor. We do not store full card numbers.
• Listing content: photos, descriptions, and location details submitted by hosts.
• Usage data: log data such as device type, IP address, and pages visited, used for security and troubleshooting.

2. How we use your information

• To create and manage your account and process bookings.
• To process payments and host payouts through M-Pesa, Airtel Money, and Flutterwave.
• To communicate booking confirmations, updates, and support responses.
• To review and approve listings, and to maintain trust and safety on the platform.
• To improve our services and detect fraudulent or abusive activity.

3. How we share your information

• Between guests and hosts: a guest's name and booking details are shared with the host for a confirmed stay, and a host's public profile is visible to guests browsing listings.
• Payment processors: Safaricom M-Pesa (Daraja), Airtel Money, and Flutterwave receive the information necessary to process a transaction.
• Service providers: we use Firebase (Google) for authentication and data storage, and Railway for hosting.
• We do not sell personal information to third parties.

4. Data storage and security

Your data is stored using Firebase Authentication and Firestore, with access restricted to our backend systems. Listing photos are stored in Firebase Storage. We take reasonable technical measures to protect your information, but no system is completely secure.

5. Your rights

• You can access and update your account information at any time from your dashboard.
• You can request deletion of your account by contacting us — some booking and payment records may be retained as required by law or for dispute resolution.
• You can contact us with questions about how your data is used.

6. Data retention

We retain booking and payment records for as long as necessary to comply with tax, accounting, and legal obligations, even after an account is deleted.

7. Children's privacy

Dutto Homes is not intended for use by anyone under 18. We do not knowingly collect information from minors.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

9. Contact

Questions about this Privacy Policy or your personal data can be sent to support@dutto.co.ke.