Privacy Policy

Bildfie, operating from Ol Rongai, Nakuru, Kenya, is the data controller for the information described in this policy. For any privacy question or to use your rights, contact us at support@bildfie.com. Put "Privacy" in the subject so it reaches the right team.

Information you give us

• Account: name, email address, phone number, password (stored only as a one-way hash), photo, date of birth or year of birth where needed.
• Profile and business: skills, headline, bio, location, work history, education, certifications, portfolio, companies, rates, up to three skill sets.
• What you post and send: projects, bids, jobs, applications and CVs, listings, reviews, courses, group posts, messages, files and photos.
• Money: wallet transactions, M-Pesa payment records (transaction code, the name registered on M-Pesa, phone number, time, amount, purpose and recipient), invoices and receipts.
• Identity checks: your ID document and a selfie when you verify your account or recover it.
• Security details: your transaction PIN (stored only as a one-way hash) and the signature image you upload for signing documents.
• Item records: serial, IMEI or chassis numbers and live photos for protected items you sell, kept encrypted.
• Learning: courses you take or teach, progress, study time, quiz and exam answers, results and certificates; for children, the link to their parent or guardian.
• Contact reviews: when you send stopped details for review, the details, your reason and your text.
• Support: what you tell us in tickets, reports, disputes and appeals.

Information we collect when you use Bildfie

• Device and connection: browser and device type, operating system, language, time zone, screen size, IP address and the page that sent you to us.
• Account activity (signed in): pages you open and how long, sign-ins and sign-outs (including failed attempts), PIN checks, the devices and networks you use, and which devices are signed in to your account (at most 3 at a time). We keep this to protect accounts and money.
• Approximate location: your town or county, worked out from your IP address; your precise location only when you choose "use my location", and then rounded.
• Contact checks: when our check stops text with contact details, we keep a record of what was stopped and where.
• Cookies and similar technologies: see our Cookies Policy.

Information from others

• Members may mention you in reviews, invite you, link you as their child or guardian, or add you to a group or company.
• Safaricom tells us the result of M-Pesa payments.
• If you sign in with Google or Microsoft, they share your name, email and photo with us.

• Run the Service: create your account, show your profile and posts, match projects with professionals by skill and place, run escrow, phase payments, orders, rent, courses and groups, and send notifications.
• Keep people and money safe: verify identities, detect fraud and scams, check text for contact details, secure accounts, investigate reports and disputes, and keep sealed records of signed documents.
• Improve: understand which features are used and fix problems, using summary figures wherever we can.
• Communicate: send messages about your account, deals and security, and, if you choose, news and offers. Every marketing email has an unsubscribe link.
• Meet legal duties: keep tax and payment records, respond to lawful requests, and enforce our terms.

We do not use your messages to show you adverts, and we do not sell your personal information.

• Contract: to provide the Service you signed up for, including payments and deals.
• Legitimate interests: to keep Bildfie safe, prevent fraud, enforce our policies and improve the Service, in ways you would reasonably expect.
• Consent: for analytics and advertising cookies, precise location, marketing messages and some alert channels. You can withdraw consent at any time.
• Legal obligation: to keep tax and payment records, answer lawful requests and protect children.

With other members

• Other members see your first name, your public profile and what you post. Your phone number, email and social accounts are never shown to other members.
• Your full name appears only on agreements, receipts and certificates shared with the people involved. A certificate check page shows the name printed on the certificate.
• Employers see a CV as text with contact details removed.
• In a group, members see the group's money records under the group's rules.
• A parent or guardian sees their child's learning progress; a sponsor sees what they paid for.

With service providers

Hosting, email and SMS delivery, push notifications, maps, video calls for course sessions, and M-Pesa (Safaricom) for payments. They may use your information only to provide their service to us.

For legal reasons

We share information when the law requires, to answer valid legal requests, to protect members or the public from harm or fraud, and to enforce our terms. Where the law allows, we tell you about requests for your information.

If Bildfie changes

If Bildfie is reorganised, merged or sold, your information may move to the new owner, who must keep this policy's promises.

• Connections to Bildfie are encrypted (HTTPS).
• Passwords and PINs are stored only as one-way hashes. Balances are hidden until you enter your PIN.
• Identity documents, CVs and private files are kept outside public storage and shown only to people allowed to see them.
• Serial, IMEI and chassis numbers are encrypted.
• Staff see only the sections their role needs, and staff access to private files is logged.

No system is perfectly secure. If a breach puts your rights at risk, we will tell you and the Data Protection Commissioner within 72 hours of finding out.

• See and correct: most of your information is in your profile and settings, where you can change it.
• Download: ask for a copy of your information in a common format.
• Delete: close your account or ask us to delete information. We keep only what the law requires.
• Object or restrict: ask us to stop or limit some uses, such as direct marketing.
• Withdraw consent: for cookies, location, alerts and marketing, at any time.
• Complain: to the Office of the Data Protection Commissioner in Kenya, or your local authority.

Send requests to support@bildfie.com. We may ask you to confirm your identity. We answer within 30 days.

Accounts are for people aged 18 and over. Children may use Learn only through a parent or guardian, who gives consent and can see and manage the child's learning. We do not use children's information for advertising or marketing. See Children & Young People.

Our hosting and service providers may process information outside Kenya. When they do, we use safeguards the law accepts, such as contract terms that protect your information.

When we make an important change, we tell you by email or in the app before it takes effect. The date at the top shows the latest version, and earlier versions are listed at the bottom of this page.