Privacy Policy

Last updated: 26 October 2026

1. Who we are
2. What we collect
3. Where it comes from
4. How we use it
5. Why we are allowed to
6. Who can see it
7. Information stored abroad
8. How long we keep it
9. How we protect it
10. What is stored on your device
11. Your rights
12. A note for tenants
13. Children
14. Changes to this policy
15. Contact us

1. Who we are

Kora is run by [registered business name and registration number], [postal address], The Gambia. We decide how the information in Kora is used, and we are responsible for it. We follow Gambian data protection law, including the principles of the Personal Data Protection and Privacy Act.

2. What we collect

About landlords, co-managers and assistants

• Your name and phone number.
• Your properties and rooms, their rents, and how often rent is due.
• Your payout details: the Wave number and bank details (bank name, account name and account number) that tenants pay rent to.
• Your plan, and which assistants and co-managers you add, with their names, phone numbers and permissions.
• Messages you send to Kora support, and our replies.

About tenants

• Your name and phone number, the room you rent, the rent and when it is due.
• The rent you owe and have paid.
• Details you enter when you pay by bank transfer, such as the reference.
• A photo or screenshot of your bank receipt, if you choose to add one when you pay by bank transfer.

About payments

• The amount, method (cash, bank transfer or Wave), date, reference, any note, the receipt number, and its status.
• A history of each payment: who recorded, confirmed, rejected or reversed it, when, and the reason given.
• For Wave payments, once they are switched on, the details our payment provider sends us to confirm the payment.

For security and to keep Kora working

• Login sessions created when you log in with an SMS code.
• Your 4-digit secret code, if you set one, stored only in a scrambled form that cannot be turned back into the digits.
• A record when payout details are changed, which is also sent to our team.
• A record of actions taken by our support team inside an account.
• Error reports when something goes wrong in the app: the page, the error, and your browser and device type.

Notifications

• If you allow notifications, a code from your phone's browser that lets us send notifications to that phone. It does not include your name or number.
• Which notifications you have chosen to receive.
• A record of which rent reminders were sent, so you do not get the same one twice.

3. Where it comes from

• From you, when you sign up, log in and use Kora.
• From landlords, who add their tenants, assistants and co-managers.
• From assistants and co-managers, who record payments for a landlord.
• From our payment provider, ModemPay, and Wave, for Wave payments.
• From your device, for error reports, login sessions, notifications and any receipt photo you add.

4. How we use it

• To create your account and log you in with SMS codes.
• To show landlords their properties, rents, payments and who is late, and to show tenants what they owe and how to pay.
• To record payments, issue receipts, and keep a payment history that cannot be quietly changed.
• To help you send WhatsApp messages and receipts, when you choose to.
• To send notifications to your phone, if you allow them: to landlords when a tenant pays or a bank transfer needs confirming, and to tenants when a payment is recorded, confirmed or rejected, and as a reminder when rent is due or late. You can switch these off in your Profile, or in your phone's settings.
• To show your landlord the receipt photo you added, so they can find your payment.
• To bring in a landlord's existing records when they upload a spreadsheet. The file is read on the landlord's own device; only the rooms and tenants they confirm are saved, not the file itself.
• To protect accounts, for example with checks and a team notice when payout details change.
• To answer support messages and fix problems, including by opening your account when you need help.
• To find and fix errors, and to improve Kora.
• To charge for paid plans, and to meet our legal duties.

We do not sell your information, we do not show advertising, and we do not use your information for marketing by anyone else.

5. Why we are allowed to

• To provide the service you asked for: most of what Kora does is needed to run your account.
• Legitimate interests: keeping Kora secure, preventing fraud, and fixing errors, in ways you would expect.
• Legal duties: keeping records the law requires, and answering lawful requests.
• Your consent: where we ask for it. You can withdraw it at any time.

6. Who can see it

Inside Kora

• A landlord, their co-manager, and their assistants (within the permissions given) can see the landlord's properties, tenants and payments.
• A tenant can see their own rent and payments, and the landlord's name, phone number and payout details so they can pay.
• Our team can see accounts when helping you, keeping Kora secure, or when the law requires it.

Companies that help us run Kora

• Supabase, which hosts our database and handles logins.
• Vercel, which hosts the Kora website and app.
• Apple, Google, Mozilla and Microsoft, whose notification services deliver notifications to your phone or computer if you allow them. They see the message and your device's notification code, not your account.
• Our SMS provider, which delivers login codes to your phone.
• ModemPay and Wave, which process Wave payments, once they are switched on.
• jsDelivr and Google Fonts, which deliver some of the app's files and fonts. They see your device's internet address when your device downloads them.

These companies may only use your information to provide their service to us.

When you choose to share

When you send a reminder or receipt on WhatsApp, Kora opens WhatsApp with the message ready. What you send then goes through WhatsApp under its own privacy policy.

When the law requires it

We may share information with the police, courts or other authorities when the law requires it, or to protect people from fraud or harm.

7. Information stored abroad

Some of the companies that help us run Kora store information on servers outside The Gambia. When that happens, we choose providers that protect information properly and we take steps to make sure your information keeps the same level of protection.

8. How long we keep it

• We keep your account information for as long as your account is open.
• Payment records and receipts are part of a financial history that landlords and tenants may need later, so we keep them even after a payment is reversed or a tenant leaves, for as long as the law requires and for up to [number] years.
• When a tenant is removed, their access stops, but their past payments stay in the landlord's records.
• Error reports are kept for up to 12 months.
• Receipt photos are kept with the payment they belong to, as part of its record.
• A phone's notification code is deleted when you log out on that phone or turn notifications off, and when the phone stops accepting them.
• When an account is closed, we delete or anonymise its information, except what we must keep by law.

9. How we protect it

• All information travels over encrypted connections.
• Each person can only see what their role allows, and these rules are enforced by our database, not just the app.
• Secret codes are stored only in scrambled form.
• Receipt photos are stored privately. Only the tenant who added one and their landlord's team can open it.
• Payments cannot be deleted, and every change is recorded with who made it.
• Changing payout details needs extra checks, and our team is told.
• When our team works inside an account, it is shown on screen and recorded.

No system is completely secure. If a breach puts your information at risk, we will tell the authorities and the people affected as the law requires.

10. What is stored on your device

Kora saves a few things on your phone or computer so it works quickly and keeps you logged in: your login session, your light or dark setting, timing for the secret code screen, a copy of the plans and prices, whether you have seen the guided tour, and copies of Kora's pages so they open quickly. If you allow notifications, your browser keeps what it needs to receive them. Kora does not use advertising or tracking cookies. You can remove all of this by logging out and clearing your browser's data for Kora.

11. Your rights

You can ask us to:

• tell you what information we hold about you and give you a copy;
• correct information that is wrong or incomplete;
• delete your information, where we do not need to keep it by law;
• limit how we use it, or stop using it for a particular purpose;
• explain any decision about you that was made automatically.

To ask, contact us using the details below. We may need to confirm who you are first. We will reply within 30 days. If you are not happy with our answer, you can complain to the authority responsible for data protection in The Gambia.

12. A note for tenants

Your landlord added your details to Kora so you can see your rent and pay it. Your landlord is responsible for the information they enter about you. If something about you is wrong, ask your landlord to correct it, or contact us and we will help.

13. Children

Kora is not meant for anyone under 18, and we do not knowingly collect information about children.

14. Changes to this policy

We will update this policy when Kora changes. The date at the top shows the latest version, and we will tell you in the app about important changes before they apply.

15. Contact us

The quickest way to reach us is "Contact Kora support" in your Profile. You can also write to [privacy or support email address] or [postal address].