App Privacy Policy

1 Scope

This policy describes how the HostGuru mobile app for Android (and any future mobile platforms) accesses, collects, uses and shares personal data. It forms part of the App Terms of Service. By installing and using the App you agree to the practices described here.

2 Data the App Collects

The App is designed to be a lightweight client portal. To work, it securely retrieves and displays information already held in your HostGuru account:

• Account & profile data: your name, email, phone number, billing address and company details, used to display and manage your account.
• Service, domain, invoice and support data: hosting plans, addons, domains, invoices, payment history and support tickets held in your HostGuru account.
• Sign-in credentials: your email and password, typed into the App’s secure sign-in page, transmitted using TLS encryption directly to the HostGuru client portal.
• Session data: an authentication token is kept on your device so you stay signed in between sessions. You can sign out at any time to clear it.

The App itself does not collect personal data in the background. It requests no sensitive device permissions — no contacts, location, SMS, camera, microphone or storage access. It contains no advertising SDKs and no third-party analytics or tracking libraries.

3 How Your Data Is Used

• To let you sign in securely and access your HostGuru account.
• To view, order, renew and manage hosting services and domains.
• To view invoices, pay bills and download payment receipts.
• To submit and track support tickets.
• To provide you a convenient in-app view of the same information available in the web portal.

4 Data Stored on Your Device

To keep you signed in, the App stores your authentication token securely on your device using the operating system’s encrypted storage. Your HostGuru password is never stored on the device. If you sign out, or the App is uninstalled, the stored token is removed.

5 Payments

Payments for invoices (including M-Pesa and card payments) are processed by our payment providers on their own secure checkout pages. Card payments are handled by the gateway provider and we do not collect, view or store full card numbers in the App or on our systems. M-Pesa transactions use the mobile money references issued by Safaricom.

6 Sharing With Third Parties

We share data only where strictly necessary:

• Payment processors: Safaricom (M-Pesa) and our card gateway — only the data required to complete your transaction.
• Domain registries: ICANN-mandated WHOIS registrant details for domains you register.
• Infrastructure providers: data centre and cloud partners operating under data processing agreements.
• Law enforcement: when required by valid Kenyan legal process.

7 Security & Retention

All communications between the App and our servers are encrypted using TLS. Account data is stored on our servers in compliance with our website privacy policy. We retain account data for as long as your account is active or as needed to provide services; after account closure, data is deleted or anonymised within 90 days. Financial records are retained for 7 years as required by Kenyan tax law.

8 Your Rights & Account Deletion

Under the Kenya Data Protection Act 2019 and GDPR you have the right to access, rectify, erase, port, object to and restrict processing of your personal data. To exercise any of these rights, contact legal@hostguru.co.ke; we respond within 30 days.

Account deletion: you may request deletion of your HostGuru account and its data at any time by contacting our support team from the App or at legal@hostguru.co.ke. We will action valid requests promptly. Deleting the App from your device does not delete your HostGuru account.

9 Contact & Complaints

For privacy enquiries or to exercise your rights, contact our Data Protection contact at legal@hostguru.co.ke. If you believe we have not addressed your concern adequately, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya at odpc.go.ke.