Last updated: October 16, 2026
This Privacy Policy explains how Renthos ("we", "us", "our"), as data controller, collects, uses, stores and protects personal data belonging to users of this platform ("you", "your"), in line with the Kenya Data Protection Act, 2019 and its regulations.
When you register and use Renthos, we collect:
If you use CampusEvents, we also collect:
We also automatically record limited technical information, such as your IP address, to secure the Platform. This includes rate-limiting registration, login, and password-reset attempts, and recording failed CampusEvents login attempts (by registration or staff number and IP address) so that repeated failures can be temporarily blocked. These failure records are cleared after a successful login.
We process your personal data on the basis of your consent (given at registration), the necessity of processing to perform our contract with you (providing the Renthos service), and our legitimate interests in keeping the Platform secure and functioning correctly.
Information you choose to publish, such as listings, roommate profiles, and approved events, may be visible to other users of the Platform. Published events show the event details, the organizer name you enter, and any poster you upload, so please do not include personal data you are not comfortable making public (for example a personal phone number in a poster or description). Pending events are visible only to the submitter and authorized administrators. Your password and email address are never displayed to other users.
Administrators of your university or organization can see event submissions, review them, and see who submitted them. They use this access only to moderate events and operate CampusEvents. Activity records (such as who created or edited an event) are visible to authorized administrators for accountability.
We use a session cookie to keep you logged in and to protect forms against forged requests (CSRF). Sessions may expire after a period of inactivity. These cookies are essential for the Platform to work and are not used for advertising or tracking across other websites.
Passwords are hashed before storage. Password-reset links are single-use, expire after 1 hour, and only a hashed version of the token is stored. Uploaded images are checked for file type and size and stored under randomized file names. We use CSRF protection, rate limiting, login throttling, role-based access controls, and other reasonable technical and organizational measures to reduce the risk of unauthorized access, loss, or misuse of your data. No system is completely secure; if a breach affecting your personal data occurs, we will notify you and the Office of the Data Protection Commissioner as required by law.
We do not sell your personal data. We share limited information with service providers who help us operate Renthos, such as our hosting provider and our email delivery provider (used to send emails like password-reset links, which involves sharing your email address and name). These providers may only process data on our instructions. We may also disclose data where required by Kenyan law or a valid request from a competent authority.
Some of our service providers may process data on servers outside Kenya. Where this happens, we take steps to ensure your data is protected as required by the Data Protection Act, 2019.
We keep your personal data while your account is active, and afterwards only as long as needed to comply with legal obligations, resolve disputes, and enforce our agreements. Expired or used password-reset tokens are removed, and a poster image is deleted from our servers when it is replaced. Activity records may be kept longer for security and moderation purposes.
Under the Data Protection Act, 2019, you have the right to:
Renthos is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has registered, contact us and we will remove the account.
Where an account violates our Terms & Conditions, we may restrict or suspend ("ban") it. Information relating to enforcement actions is retained for record-keeping and platform-safety purposes.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
For questions about this Privacy Policy or to exercise your data protection rights, contact us at support@renthos.com.
If this tab doesn't close automatically, just switch back to your registration tab — your details are still there.