Privacy Policy

When you create a WiyoRent account or complete your profile, we collect the following personal information:

• Identity data: your full name, profile photo, and university or institution affiliation.
• Contact data: your email address and, if you choose to provide it, your WhatsApp number.
• Housing preferences: your budget range, preferred neighbourhoods, room type, and move-in timeline.
• Housemate matching data: lifestyle details such as sleep schedule, cleanliness preferences, smoking and pet tolerance, and other compatibility filters you complete voluntarily.
• Usage data: pages visited, listings viewed, and actions taken on the platform, collected automatically to help us improve the service.

Providing your WhatsApp number is entirely optional. All other fields marked as required are necessary to create a functional profile on the platform.

We use the information we collect for the following purposes:

• To display your profile and listings to other verified users of the platform.
• To power housemate matching — surfacing compatible profiles based on your stated preferences and filters.
• To send you service-related communications, including account confirmations, listing status updates, and important platform notices.
• To analyse platform usage in aggregate so we can improve features, fix issues, and grow our verified housing inventory.
• To verify that users are enrolled students at a recognised institution, in line with our eligibility requirements.

We do not use your data for automated profiling or decisions that have legal or similarly significant effects on you.

WiyoRent does not sell, rent, or trade your personal data to any third party. We do not use your data for third-party advertising.

We share data only with trusted infrastructure and service providers who help us operate the platform, including:

• Neon — our managed PostgreSQL database provider, where your account and profile data is stored securely.
• Vercel — our hosting provider for the web application.
• Resend — our transactional email provider, used to deliver account and service notifications.
• Google OAuth — used for sign-in. We receive only the information Google shares during authentication (name, email, and profile photo).

All third-party providers are contractually required to process your data only as instructed by WiyoRent and to maintain appropriate security standards.

We retain your personal data for as long as your account remains active on the platform.

If you request deletion of your account, all personally identifiable information associated with your profile — including your name, email, photo, preferences, and contact details — will be permanently purged from our systems within 30 days of your request.

Aggregated, anonymised usage statistics that cannot be linked back to you may be retained indefinitely for analytics purposes.

You have the following rights regarding your personal data:

• Access: you may request a copy of the personal data we hold about you.
• Correction: you may update your profile information directly within your account settings at any time.
• Deletion: you may request that your account and all associated data be deleted by emailing support@wiyorent.com.
• Withdrawal of consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@wiyorent.com. We will respond within 14 business days.

WiyoRent uses cookies minimally and only for essential purposes. Specifically, we use a single session cookie issued by our authentication provider (NextAuth) to keep you signed in between visits.

We do not use advertising cookies, tracking pixels, or any third-party analytics cookies. You may configure your browser to block or delete cookies, but doing so will prevent you from staying signed in to the platform.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. All data in transit is encrypted via HTTPS, and our database provider enforces encryption at rest. However, no system can guarantee absolute security, and we encourage you to use a strong Google account password and to log out of shared devices.

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Rwanda. Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of the courts of Rwanda.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact WiyoRent Ltd at support@wiyorent.com. Our team is based in Kigali, Rwanda.