Privacy Policy

Last updated: August 2026

This policy explains what information Spotly collects, how it's used, and the choices you have. It applies to everyone using Spotly, people browsing and saving places, and businesses listing on the platform.

Information we collect

From everyone with an account:

Name and email address (or your Google account info, if you sign in that way)
Businesses you save and reviews you write
Basic usage data, which pages and businesses you view, so we can show accurate view counts to businesses and improve what we surface to you

Additionally, from business owners:

Business name, category, description, contact details, and location
Photos and videos you upload
M-Pesa phone number and payment/transaction records for subscription payments

We don't collect more than we need to run the service, and we don't sell your data to anyone.

How we use it

To show you businesses, experiences, and reviews relevant to what you're looking for
To let business owners see how many people are viewing and saving their listing
To process subscription payments via M-Pesa
To send account-related emails (welcome messages, password resets) and, occasionally, platform updates
To automatically check uploaded photos for quality (blur, resolution) and flag likely duplicate or stolen images

Who we share it with

We use a small number of third-party services to actually run Spotly:

Safaricom (Daraja/M-Pesa), to process subscription payments
Resend, to deliver account emails
Cloudinary or an S3-compatible provider, to store uploaded photos and videos
Google, only if you choose to sign in with your Google account

Each only receives what it needs to do its job (e.g. Safaricom receives payment details, not your saved places). We don't share your information with advertisers or data brokers.

Your rights

Under Kenya's Data Protection Act (2019), you have the right to access, correct, or request deletion of your personal data. You can delete your saved places and reviews yourself from your account; for anything else, including a full account deletion, contact us at the email below. Business owners can delete their entire business listing at any time from their dashboard.

Data retention

We keep your data for as long as your account is active. If you delete your account, we remove your personal information within a reasonable period, except where we're required to keep records (e.g. payment records) for legal or accounting purposes.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page and, for significant changes, let you know directly.

Contact

Questions about this policy or your data: privacy@spotly.co.ke

This is a working draft meant to give a clear, honest account of what Spotly actually does with your data, it hasn't been reviewed by a lawyer yet. Have it checked against Kenya's Data Protection Act before relying on it for a real launch.