Privacy Policy

Last updated: June 10, 2026

Your trust matters to us. This policy explains what information we collect, why we collect it, who we share it with, and the choices you have. We've kept it clear and specific.

1. Who this policy covers

This policy applies to everyone who uses Jarakey, including property managers, portfolio managers, facility, security, and maintenance managers, property owners, tenants, and residents. We handle your data in line with the Nigeria Data Protection Act 2023 (NDPA).

2. Information we collect

We collect only what we need to run the platform for you:

Account details: your first and last name, email address, phone number, and password (stored only as a secure, one-way hash, never as plain text).
Property data: the properties, units, leases, tenants, residents, staff, maintenance, and inspection records you create or manage.
Access and code data: visitor and access codes you generate, and records of when they are used.
Payment information: transaction references and statuses, and limited details such as the last four digits of a card. We never see or store full card numbers, those are handled by our payment partner.
Device and notification data: push-notification tokens so we can send you alerts you have opted into.
Usage and technical data: how you use the product, plus technical logs such as request details and error information.

3. How we use your information

To provide, maintain, and improve the platform and its features.
To process subscriptions and payments.
To verify your identity and protect your account.
To send you service messages, alerts, and support responses.
To keep the platform safe: detecting and preventing fraud and abuse.
To meet our legal and regulatory obligations.

5. Product analytics

We measure how the product is used so we can improve it. This usage analytics is processed on our own systems through our analytics provider, and is tied to your account rather than to advertising or cross-site tracking. We do not run advertising trackers.

6. Payments and card data

Payments are handled by Paystack, a PCI-DSS compliant payment processor. When you pay, your card details go directly to Paystack. Jarakey only receives a reference and a status. We never store your full card number.

7. How long we keep your data

We keep your data while your account is active so we can provide the service.
After your subscription expires, you can request a copy of your data for 90 days. After that, expired accounts are queued for deletion.
If you delete your account, we remove or anonymise your personal information and end your sessions.

8. Your rights and choices

You can access and update your profile, request a copy of your personal data, delete your account, and manage notifications. To exercise any of these rights, email privacy@jarakey.com. We will respond within the timeframes set by the NDPA.

9. How we protect your data

We encrypt your data in transit and at rest, scope access by role, and follow strong security practices across our systems. For the full picture, see our Trust and Security page.

10. Where your data is processed

We host the platform on established cloud infrastructure (Amazon Web Services). Some of our service providers may process data outside Nigeria. When that happens, we take steps to ensure your data stays protected.

11. Children

Jarakey is built for property management and is not intended for children under 18. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy as the platform evolves. We will update the "Last updated" date above and, for material changes, take reasonable steps to let you know.

In plain English: "Material change" means a change that meaningfully affects your data or your rights, not a small wording fix.

13. Contact us

Questions about your privacy? Email privacy@jarakey.com.