Last updated: 8 October 2026
This Privacy Policy explains how Netify Global Ltd (“we”, “us”) collects, uses, shares and protects your personal data when you use One Million Community (the “Service”), and the rights you have. We handle personal data in line with the Kenya Data Protection Act, 2019 and its regulations, and other laws that apply to us. Please also read our Terms of Use and Cookie Policy.
Netify Global Ltd, Westpark Tower, 5th Floor, Westlands, Nairobi, Kenya, is the “data controller” for the personal data described in this policy. Privacy contact: support@one-million-community.com (subject line “Privacy”), or the Contact Us page.
The Kenya Data Protection Act treats certain information as sensitive, including ethnic or social origin, belief, marital status, family details, sex, sexual orientation, health, and biometric data. On a service like this, your profile may include some of it (for example your tribe or ethnic background, religion or marital status, and details about your family). You decide whether to provide optional sensitive details, and you can remove them at any time by editing your profile. We only process this information with your consent, to show it on your profile as you choose and to suggest compatible members. By providing it you consent to that use. If a question is marked as required on the sign-up form, we explain why in the form. We never use your sensitive data for advertising.
| Purpose | Examples | Our legal basis |
|---|---|---|
| Provide the Service | Create your account, show your profile, suggest and search members, let members message each other, process your membership | Performing our contract with you |
| Verify you and keep members safe | Email and phone verification, photo moderation, detecting fake accounts, scams, abuse and underage users, handling reports | Our legitimate interest in a safe service; legal obligations |
| Sensitive profile details | Showing tribe, religion, marital status or family details you chose to add; matching on them | Your explicit consent |
| Payments and accounting | Confirming payments, receipts, preventing payment fraud, keeping financial records | Contract; legal obligation |
| Communicate with you | Verification codes, security alerts, receipts, notifications about messages and activity, support replies, important service notices | Contract; legitimate interest |
| Marketing | News, offers or reminders about the Service | Your consent. You can withdraw it at any time |
| Improve and secure the Service | Fixing errors, measuring performance, understanding which features work, protecting our systems | Legitimate interest |
| Legal reasons | Responding to lawful requests from courts, police or regulators; establishing or defending legal claims; enforcing our Terms | Legal obligation; legitimate interest |
We do not sell your personal data. We do not use your data for advertising by third parties.
We share personal data only as needed with trusted providers who work for us under contracts that require them to protect it, and with authorities when the law requires.
| Provider (type) | What for | Data involved |
|---|---|---|
| Paystack (payment processor) | Taking payment by card, mobile money or bank | Payment details you enter with them; we get a confirmation and reference |
| Hosting provider (SkaDate managed hosting) | Hosting the website, database and files | All data stored by the Service |
| Google (Firebase Cloud Messaging; Google Maps) | Delivering push notifications; showing maps and place search | Notification token; location you enter or allow |
| Email delivery provider (Resend) | Sending verification, welcome and notification emails | Your email address, name and the email content |
| SMS provider (Advanta) | Sending phone verification codes | Your mobile number and the code |
We may also share data: (a) with the police, courts or regulators where we are legally required to or where it is necessary to prevent or investigate a crime or protect someone’s safety; (b) with professional advisers (lawyers, auditors) under confidentiality; and (c) with a buyer or successor if our business is sold or reorganised, who must keep protecting your data under this policy.
Some of our providers (for example Google and our email provider) process data on servers outside Kenya, including in the United States and Europe. Where we transfer personal data abroad we do so only where the Data Protection Act allows it — for example because the recipient is bound by contract to protect it to an adequate standard, or with your consent. By using the Service and providing sensitive details you consent to those transfers, which are necessary to deliver the Service.
Under the Data Protection Act you have the right to:
You can access, change, download or delete much of your data directly in the app (Settings), including your account deletion option. For anything else, contact us at the address above. We aim to reply within 30 days, and may need to confirm your identity first. We cannot always delete everything (for example records we must keep by law), and we will explain if so. There is no charge unless a request is clearly unfounded or excessive.
If you are not satisfied, you have the right to complain to the Office of the Data Protection Commissioner of Kenya (www.odpc.go.ke). We would appreciate the chance to put things right first.
We use automated tools to suggest and sort members using the details members provide (such as age, location and preferences) and to help detect spam, fake accounts and unsafe content. These tools support, but do not replace, our judgement. If an account is suspended or an image is removed because of an automated check, you can ask us for a human review by contacting us.
We use technical and organisational measures to protect personal data, including encrypted connections (HTTPS), password hashing, access restrictions and monitoring. No system is completely secure, so please use a strong, unique password and never share it. If a data breach creates a real risk of harm to you, we will notify you and the Data Commissioner within the time the law requires.
The Service is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child is using the Service, please tell us and we will remove the account and the data.
We will only send you marketing messages if you agreed. Each marketing email has an unsubscribe link, and you can also change your choices in Settings or by contacting us. We will still send you messages that are necessary for your account.
We use cookies and similar technologies that are needed to run the Service and keep it secure. See our Cookie Policy for details and your choices.
The Service may link to websites we do not control. This policy does not apply to them, so please read their privacy policies.
We may update this policy from time to time. We will post the new version here with a new date and, if the changes are important, tell you in the app or by email. Please review it regularly.
Netify Global Ltd, Westpark Tower, 5th Floor, Westlands, Nairobi, Kenya
Email: support@one-million-community.com — subject “Privacy”
Contact Us