Privacy Policy..

1. Who controls your data

Anny, operated by [Legal entity name — company registration pending] ([Registered address — to be completed], Nairobi, Kenya), is the data controller for the personal data described here. Contact us at hello@anny.ke for anything in this policy, including exercising your rights under section 8.

2. What we collect

• Identity and contact: name, phone number, email.
• Vehicle: plate, make, model, colour and class — one record per vehicle, kept even after a booking so a repeat wash does not ask twice.
• Location: the address, gate code, parking notes and access instructions for a booking, and the zone it falls in.
• Vehicle condition photos: six photos of your vehicle taken before any work starts (front, rear, left, right, interior front, interior rear), and before/after photos of each cleaning task.
• Payment: card payments are authorised and captured by our payment provider directly — we never see or store your card number. M-Pesa payments are identified by the phone number the STK push is sent to and the provider’s transaction reference. We hold no card numbers ourselves.
• Communications: messages we send you by SMS, WhatsApp or email, and support conversations you have with us.
• Usage data: how you use the app and site — pages viewed, app events — collected through our analytics tool.
• Reviews and reports: ratings, written feedback, and anything you tell us about a problem visit.

3. Why we collect it, and on what basis

• To provide the service you booked — match you with a washer, confirm the visit, charge you correctly: necessary to perform our contract with you.
• To resolve a damage dispute — the pre-wash walkaround photos exist specifically so a claim is judged on evidence, protecting both you and the washer: our legitimate interest, and yours.
• To prevent fraud and enforce the terms — an unpaid balance, a duplicate account, a payment reconciliation: our legitimate interest and, for payment record-keeping, a legal obligation under Kenyan tax law.
• To contact you about your booking — arrival, delay, a balance due, a rating request: necessary to perform the contract.
• To improve the service — which zones to open next, whether a step in booking is confusing: our legitimate interest, kept to aggregate or de-identified analysis wherever the question does not need your identity.
• To send you offers or news, only where you have opted in: consent, withdrawable at any time.

4. Who a washer sees

A washer assigned to your visit sees your name, vehicle, address and access instructions — what they need to reach you and do the job. A washer never sees the price you paid: this is enforced in our systems as a permission, not left to a screen to hide it. Washers are individually vetted before being approved to take a visit.

5. Who else we share data with

We do not sell your data. We share it, only as needed to run the service, with:

• Payment processors (currently Paystack for card payments, Safaricom for M-Pesa STK push) — to collect payment for a booking.
• Africa’s Talking — to send SMS and WhatsApp messages about your booking.
• Brevo — to send email confirmations, receipts and account messages.
• Cloudflare R2 — where photos and documents are stored.
• PostHog — for the usage analytics described above.
• Our hosting provider — where the application and database run.
• Kenyan authorities, where the law requires it (for example, tax records).

Each of these processes data on our instructions, under a contract that limits what they may do with it. Where a provider is outside Kenya, we choose providers who apply equivalent safeguards to the transfer.

6. How long we keep it

• Booking, payment and vehicle records: for as long as your account is active, plus the period Kenyan tax and company law requires afterwards.
• Walkaround and checklist photos: kept for the window in which a damage claim or quality report can be raised, and longer where a claim is actually open.
• Marketing consent: until you withdraw it.
• We never hard-delete a record outright — a cancelled booking, a closed account or a cleaner who has left are marked as such rather than erased, because the history behind a payment or a damage claim has to survive. A deletion request under section 8 is honoured by removing or anonymising what identifies you personally, within what the law lets us keep.

7. Cookies and analytics

The site and app use a small number of essential cookies or local storage entries to keep you signed in and remember your booking in progress — the service does not work without these. We also use PostHog to understand how the app and site are used; this can be declined without affecting your ability to book.

8. Your rights

Under the Kenya Data Protection Act, 2019, you have the right to: be informed how your data is used (this page); access the data we hold about you; ask us to correct it; object to or restrict certain processing; ask for erasure, subject to section 6; and receive a copy of your data in a portable format. Exercise any of these by writing to hello@anny.ke. If you are not satisfied with our response, you may complain to the Office of the Data Protection Commissioner, Kenya.

9. Security

Payment confirmations are accepted only from our payment providers, cryptographically verified, never from a browser redirect. Access to client and vehicle records is scoped by role, and a washer’s view of a booking is deliberately built without a price field. No system is perfectly secure; if we become aware of a breach affecting your data, we will tell you and the Data Commissioner as the law requires.

10. Children

Anny is not directed at, and does not knowingly collect data from, anyone under 18.

11. Changes to this policy

We may update this policy as the service or our processors change. The date at the top shows the last update; a material change is flagged in the app.

12. Contact

Questions about your data, or to exercise a right under section 8: hello@anny.ke.