Privacy Policy
- We collect only what Soko List needs to let you post listings, find items and contact other people.
- Your listings are public. Your email address is never shown to other users.
- Your phone number is shown only on listings where you turn on “Show my phone number”.
- We do not sell your data, show ads, or use tracking or analytics tools.
- You can delete your account and data at any time, right in the app. See Delete your account.
1. Who we are
Soko List is a classifieds app that helps people in Kenya buy and sell items locally. The app is operated by At Point (“we”, “us”). For any privacy question, email support@sokolist.co.ke.
We handle personal data in line with the Kenya Data Protection Act, 2019.
2. Information we collect
When you sign in
You can sign in in one of three ways:
- With Google: we receive your name, email address, profile picture link and a Google account identifier. We do not receive your Google password.
- With a code sent to your email: we store your email address and send you a one-time code to sign in.
- With an email and password: we store your email address and a scrambled (hashed) version of your password. We cannot read your password.
We use this information only to create your account, keep it secure and sign you in.
Information you give us
| What | Who can see it |
|---|---|
| Display name | Everyone, on your listings and in chats |
| Town | Everyone, on your listings |
| Phone number (optional) | Signed-in users, only on listings where you turn on “Show my phone number” |
| Listings: title, description, price, category, town and photos | Everyone, including people who are not signed in |
| Messages you send in the app | You and the person you are chatting with |
| Reports you file about listings | Our moderators only. The seller is not told who reported them. |
Information collected automatically
- Account activity: when your account was created and when you last signed in.
- Technical data: like any internet service, our hosting provider receives your IP address and basic request details when the app connects to our servers. These are kept in short-term service logs.
- On your device only: the app remembers the town you last chose so it can show nearby listings. This stays on your phone.
What we do not collect
- We do not access your GPS location. You choose your town yourself.
- We do not access your contacts, camera roll or files, except the photos you choose to add to a listing.
- We do not use advertising IDs, analytics or tracking tools.
- We do not handle payments. Buyers and sellers arrange payment, such as M-Pesa, between themselves.
3. How we use your information
- To run the marketplace: show listings, search, and let buyers contact sellers.
- To deliver messages between users.
- To keep Soko List safe: review reports, remove listings that break our rules, and suspend accounts used for scams or abuse.
- To answer you when you contact us.
We process your information to provide the service you signed up for, and for our legitimate interest in keeping the marketplace safe. We do not use your information for advertising, and we do not sell it.
4. Who we share it with
We share information only with the services that run Soko List:
- Supabase hosts our database, photo storage and sign-in system. Data is stored on Supabase servers in the European Union (Ireland).
- Google provides Google Sign-In. The app also loads its fonts from Google’s font servers, which receive your IP address when they do.
- Resend sends our sign-in emails, so it receives your email address and the one-time code.
- Cloudflare hosts this website and our domain, so it receives your IP address and basic request details when you visit sokolist.co.ke.
We may also disclose information if Kenyan law requires it, or to protect people from fraud or harm.
Anything you put in a listing is public. Only share contact details you are happy for strangers to see, and never share one-time passwords or M-Pesa PINs with anyone.
5. How long we keep it
- Your account, profile and listings are kept until you delete them or delete your account.
- Messages are kept until the related listing or either person’s account is deleted.
- Reports are kept while we review them and for up to 12 months afterwards, to help us deal with repeat abuse.
- When you delete a listing, its photos are deleted from our storage.
6. Security
All data travels between the app and our servers over encrypted connections (HTTPS). Database access rules make sure people can see only what they are allowed to: for example, only the two people in a chat can read it, and phone numbers are hidden unless the seller chooses to show them. Messages are not end-to-end encrypted, so do not send passwords, PINs or ID numbers in chat.
7. Your rights
Under the Kenya Data Protection Act, you can:
- see the personal data we hold about you;
- correct it (you can edit your name, phone number and town in the app under Account);
- have it deleted;
- object to how we use it.
Email support@sokolist.co.ke to use any of these rights. We reply within 30 days. If you are not happy with our answer, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).
8. Delete your account
Full details are on our Delete your account page. In short:
In the app: open Soko List, tap the account icon at the top of the Home screen, scroll down and tap Delete account, then type DELETE to confirm. Your account and data are deleted straight away.
By email: if you can no longer open the app, email support@sokolist.co.ke from the email address you sign in with, with the subject “Delete my Soko List account”. We will do it within 30 days.
Either way, we delete:
- your account and profile (name, phone number, town);
- all your listings and their photos;
- your conversations and messages.
Reports you filed are deleted too, and service logs expire on their own. If your account was suspended for fraud, we may keep a note of the suspended email address for up to 12 months to stop repeat abuse.
To delete a single listing without deleting your account, open the app, go to Account → My listings, and choose Delete.
9. Children
Soko List is meant for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
10. Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change affects how we use your data in an important way, we will also tell you in the app.