Legal
Privacy Policy
Last updated · 10 August 2026
This Privacy Policy explains what personal data Swyft collects, the legal basis on which we process it, who we share it with, and how we keep it safe. It is written to match the data we disclose on our Google Play and App Store listings, and to comply with Kenya's Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021. Swyft is operated by Taleel Holdings LTD, which is the data controller responsible for your personal data.
1. Who we are (data controller)
Swyft is operated by Taleel Holdings LTD ("Swyft", "we", "us"), the data controller that determines how and why your personal data is processed. As required by the Data Protection Act, 2019, we are registered as a data controller with the Office of the Data Protection Commissioner (ODPC).
- Data controller: Taleel Holdings LTD
- Data Protection Officer / privacy contact: support@swyft.africa
2. Data we collect
We only collect data that is needed to run Swyft and provide the service you ask for. The categories below map to the data types shown on our app store listings. Providing this data is voluntary, but some of it is necessary to use core features — where that is the case, we tell you at the point of collection and explain what happens if you don't provide it.
- Personal info — your name, phone number, email address, and a password (or sign-in identifier).
- Location — your approximate and precise location to show nearby listings, estimate fares, and enable live tracking during an active move. Precise location is only used while you have granted permission.
- Financial info — your payment method (such as M-Pesa) and your in-app purchase and transaction history. Payments are processed by our payment partners; we do not store full payment card details.
- App activity — the videos and listings you watch or save to your Bucket List, viewing fees you pay, moves you book, searches, and how you interact with the app.
- App info & performance — crash logs and diagnostics used to keep the app stable.
- Device or other identifiers — device type, operating system, app version, and a device identifier used for diagnostics and fraud prevention.
We collect this data directly from you. In limited cases we may receive data indirectly — for example, from a driver confirming a completed move, or from our verification partners — as permitted by section 28 of the Data Protection Act, 2019.
3. Legal basis for processing
Under section 30 of the Data Protection Act, 2019, we only process your personal data where we have a lawful basis to do so. Depending on the activity, we rely on one or more of the following:
- Your consent — for example, to access precise location, send you marketing, or process any optional data. You can withdraw consent at any time.
- Performance of a contract — to create and manage your account, process viewing fees, and connect you with drivers so we can deliver the service you request.
- Compliance with a legal obligation — for example, keeping transaction records required by tax and financial law.
- Our legitimate interests — to keep the platform safe, prevent fraud and scam listings, and improve the app, provided these interests are not overridden by your rights.
4. Data safety summary
This is a plain-language summary of what we collect and share, why, and our key security commitments — the same disclosures shown on our store listings.
- Personal info (name, phone, email, user ID) — Collected. Shared with a driver when you book a move so they can reach you. Used for account management and app functionality.
- Location (approximate & precise) — Collected. Shared with your assigned driver during an active move. Used for app functionality (nearby content, fares, live tracking).
- Financial info (payment & purchase history) — Collected. Shared with payment processors to complete a transaction. Used for app functionality and fraud prevention.
- App activity & search history — Collected. Used for app functionality, personalising your feed, and analytics. Not shared for advertising.
- App info, performance & device IDs — Collected. Used for analytics, diagnostics, and fraud prevention.
- Security commitments — data is encrypted in transit, you can request that your data be deleted, and we do not sell your personal data or use it for third-party advertising.
5. How we use your data
- To run the video feed and personalise listings for you;
- To process viewing-fee payments and unlock verified property details;
- To connect you with independent drivers and enable live tracking of a move;
- To verify accounts and prevent fraud and scam content;
- To provide customer support and keep the app stable;
- To send service updates and, where you opt in, marketing.
6. Personalisation & automated decisions
We use your app activity — the listings you watch, save, and search for — to personalise the videos and properties shown in your feed. This is a limited form of profiling used only to make the app more relevant to you. We do not make decisions that produce legal effects, or similarly significant effects, about you based solely on automated processing. Where any such decision were ever taken, you would have the right under section 35 of the Data Protection Act, 2019 to ask us to review it and to have a person reconsider it.
7. How we share data
We share data only as needed to provide the service:
- With drivers — the details needed to complete a move you book (such as your name, phone number, and pickup and drop-off locations).
- With service providers — such as payment processors (M-Pesa and partners), mapping providers, and cloud and analytics providers, who process data only on our documented instructions and are bound by written contracts to protect it, as required by section 42 of the Data Protection Act, 2019.
- With authorities — where required by law or to protect the rights and safety of our users.
Swyft Scouts who film property videos do not receive your personal data and never meet you — trust is handled through KYC verification, ratings, and freshness checks. We do not sell your personal data, and we do not share it for third-party advertising.
8. Transfer of data outside Kenya
Some of our service providers (for example, cloud hosting and analytics) may store or process your data on servers located outside Kenya. Where this happens, we transfer your data only in line with sections 48 and 49 of the Data Protection Act, 2019 — that is, where there are appropriate safeguards to protect it (such as contractual data-protection terms and a jurisdiction with comparable data protection law), where the transfer is necessary to perform our contract with you, or where you have consented. You may contact us for more information about these safeguards.
9. Location data
Swyft uses your location to show nearby listings, calculate fares, and enable live tracking during a move. Precise location is only accessed while you grant permission, and is shared with your driver only for the duration of an active move. You can disable location access in your device settings, though some features may not work as a result.
10. Payments & financial data
Payments and viewing fees are processed through the methods offered in the app, such as M-Pesa. Card and mobile-money details are handled by our payment partners — we receive a record of the transaction (amount, status, and reference) but do not store full payment card numbers.
11. Data retention
In line with section 39 of the Data Protection Act, 2019, we keep your personal data only for as long as your account is active or as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete, anonymise, or pseudonymise your personal data unless we are required to retain some of it by law (for example, transaction records kept for tax and financial-reporting purposes).
12. Data security & breach notification
We use technical and organisational measures — including encryption of data in transit, access controls, and secure infrastructure — to protect your data, and we build data protection into our systems by design and by default. No system is completely secure, but we work continuously to safeguard your information.
If a personal data breach occurs that poses a real risk of harm to you, we will notify the Office of the Data Protection Commissioner without undue delay and within 72 hours of becoming aware of it, and we will inform you where required, as set out in section 43 of the Data Protection Act, 2019.
13. Your rights
Under the Data Protection Act, 2019, you have the right to:
- Be informed of how your personal data is used;
- Access the personal data we hold about you;
- Request correction of inaccurate, outdated, or misleading data;
- Request deletion or erasure of your account and data;
- Object to, or request that we restrict, certain processing;
- Receive your data in a structured, commonly used, machine-readable format and have it ported to another provider where technically feasible;
- Withdraw consent, including for marketing, at any time.
You can delete your account from within the app, or use our account & data deletion request page. To exercise any other right, contact support@swyft.africa. We will action verified requests within the timelines set by law (generally within 30 days for data-portability and similar requests). We may need to verify your identity before acting on a request.
14. Complaints to the Data Commissioner
If you believe we have not handled your personal data lawfully, we ask that you contact us first so we can put things right. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) under section 56 of the Data Protection Act, 2019 — via www.odpc.go.ke or info@odpc.go.ke.
15. Children
Swyft is not intended for anyone under 18. We do not knowingly collect personal data from children, and we use age-declaration checks at sign-up to help prevent it. If we learn that we have collected data from a child without appropriate parental or guardian consent, we will delete it. If you believe a child has provided us with personal data, please contact support@swyft.africa.
16. Changes to this policy
We may update this policy from time to time. The latest version will always be available here with an updated date, and material changes will be reflected in our store listings and, where appropriate, notified to you in the app.
17. Contact
For privacy questions or data requests, contact our data protection contact at support@swyft.africa.
