Privacy Policy

Crib is a property-management platform operated by GeoBox Digital Services (U) Ltd (“Crib”, “we”, “our”, or “us”), a company based in Kampala, Uganda. This Privacy Policy explains how we collect, use, share, and protect information when you use our property-management platform, marketing site, and related services (together, the “Service”), in line with Uganda’s Data Protection and Privacy Act, 2019 — see our Data Protection page for more on your rights.

1. Information we collect

• Account & profile data — name, email address, phone number, role (e.g. landlord, agency, tenant, caretaker), and organisation details you provide when you sign up or are invited to a workspace.
• Property & tenancy data — information you or your organisation enter about properties, units, leases, tenants, payments, and maintenance requests in order to use the Service.
• Communications — messages sent through the Service, support requests, and demo-booking enquiries, including any contact details you supply.
• Usage & device data — log data, device and browser information, and analytics about how you interact with the Service, collected automatically to keep it secure and improve it.

2. How we use information

• To provide, operate, and maintain the Service you and your organisation rely on.
• To process rent payments, generate statements, and send lease- and tenancy-related notifications.
• To respond to support requests, demo bookings, and other communications you initiate.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To improve and develop new features, informed by aggregate, de-identified usage trends.

3. How we share information

We do not sell your personal data. We share information only:

• Within your organisation, according to the roles and permissions configured by your administrators.
• With service providers who help us operate the Service (e.g. hosting, email, SMS, and payment processing), under contractual confidentiality obligations.
• When required by law, regulation, legal process, or governmental request.
• To protect the rights, property, or safety of Crib, our users, or the public.

4. Data retention

We retain personal data for as long as your account or organisation remains active, and for a reasonable period afterwards to meet legal, accounting, or reporting obligations (such as tenancy and payment records). You may request deletion of your data subject to these obligations — see “Your rights” below.

5. Security

We use industry-standard safeguards — including encryption in transit and at rest, role-based access controls, and audit logging — to protect information from unauthorised access, alteration, disclosure, or destruction. No system is perfectly secure, and we continuously work to strengthen these protections.

6. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, or to object to or restrict certain processing. To exercise any of these rights, contact us using the details on our About page or via the contact options in the site footer.

7. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date above. Material changes will be communicated through the Service or by email where appropriate.

8. Contact us

Questions about this policy or how we handle your data? Reach us through the “Email us” or “WhatsApp Us” links in the site footer.