Privacy
Privacy notice
Last updated 28 September 2026
BomaSafe is a gate and visitor app for residential properties in Kenya. We handle personal data in line with Kenya's Data Protection Act, 2019. This notice explains what we collect, why, and what you can ask us to do with it.
Contact
Email hello@bomasafe.com or call / WhatsApp +254 788 880088.
This website
When you fill in the "Book a pilot" form we collect your name, role, society or building name, number of units, phone number and, if you give it, your email. We use it only to contact you about BomaSafe. We don't sell it or use it for advertising. Form entries are stored by our website host, Netlify. This site doesn't use advertising or tracking cookies.
The BomaSafe app
When a property uses BomaSafe, the property (its management or committee) decides what the app is used for and is responsible for its records. BomaSafe processes the data on the property's behalf, to run the app.
Depending on the features the property switches on, the app holds:
- Residents and managers: name, phone number, email if given, and unit.
- Visitors: name, phone number, company, purpose of visit, unit visited, time, and whether the resident approved or denied entry. For deliveries and service providers the guard takes a photo of an ID; a face photo is optional.
- Passes: the guest's name, purpose and how long the pass is valid.
- Property records: notices, party-hall bookings, maintenance requests, and payment proofs that residents upload (for example an M-Pesa message). BomaSafe does not process payments.
- Gate phone: shift logins and Night Buzzer check results.
Why we use it
To control and record entry at the property's gate, to let residents approve their own visitors, and to help the property run notices, bookings, payment follow-up and maintenance. We don't use this data for marketing and we don't sell it.
Who can see it
Only signed-in app users at the same property, according to their role. Residents see visitors and passes for their own unit. Guards see what they need at the gate. The property's managers see the property's records. Photos are kept in private storage and are never published on a public link. A small number of BomaSafe staff can access data to set up and support the property.
Where it's stored
Data is stored with our cloud providers, whose servers may be outside Kenya. Where data is transferred outside Kenya we rely on the safeguards the Act requires.
How long we keep it
We keep a property's records while it uses BomaSafe, or for the period agreed with the property, and then delete them. Website form entries are deleted when they are no longer needed to follow up with you.
Your rights
Under the Data Protection Act you can ask to see the personal data held about you, ask us to correct or delete it, and object to how it is used. For records held for your property, you can ask the property's management or contact us directly and we will work with them. If you are not satisfied, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).
Changes
If we change this notice we will update the date at the top of this page.