Legal

Privacy Policy

DomLift Limited · TIN: 156138097 · Registered in Rwanda
Last updated: April 25, 2026 · Effective: April 25, 2026

The short version DomLift collects only the data needed to provide property management services. We never sell your data. Your financial transactions go directly between you and your tenants — DomLift never holds or processes money.

Table of Contents

  1. Who we are
  2. What data we collect
  3. How we use your data
  4. How we store and protect your data
  5. Data sharing and third parties
  6. Your rights
  7. Cookies
  8. Children's privacy
  9. International data transfers
  10. Changes to this policy
  11. Contact us

1. Who we are

DomLift Limited ("DomLift", "we", "us", "our") is a property management software company registered in Rwanda (TIN: 156138097). Our registered address is Nyagacaca, Ruyenzi, Runda, Kamonyi, Southern Province, Rwanda.

DomLift operates the platform available at domliftapp.com, including the landlord dashboard, tenant portal, and mobile applications on iOS and Android.

We are registered as a Data Controller under Rwandan data protection law and are in the process of obtaining a Data Protection License from the National Cyber Security Authority (NCSA) of Rwanda.

2. What data we collect

For landlords:

For tenants:

Automatically collected:

We do not collect payment card details, MTN MoMo PINs, Airtel Money PINs, or bank account credentials. All payment transactions happen directly between tenants and landlords through Rwanda's existing payment infrastructure.

3. How we use your data

We use your data solely to provide the DomLift service:

We do not use your data for advertising, profiling, or any purpose unrelated to providing the property management service.

4. How we store and protect your data

Your data is stored securely using Supabase (our database provider), which operates on AWS infrastructure. Data is stored with encryption at rest and in transit using TLS.

Access to your data is controlled by Row Level Security (RLS) policies — this means each landlord can only see their own properties and tenants, and each tenant can only see their own unit data.

We retain your data for as long as your account is active. If you delete your account, your data is removed within 30 days. Payment records may be retained for up to 7 years for legal and tax compliance purposes.

5. Data sharing and third parties

We share your data only with the service providers necessary to operate DomLift:

We do not sell, rent or share your personal data with any third parties for marketing, advertising or any commercial purpose.

We may disclose data if required by Rwandan law or a valid court order.

6. Your rights

Under Rwandan data protection law, you have the right to:

To exercise any of these rights, contact us at privacy@domliftapp.com. We will respond within 30 days.

7. Cookies

DomLift uses a single session cookie to keep you logged in to your account. This cookie is essential for the service to function and expires after 365 days or when you log out.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

8. Children's privacy

DomLift is a professional property management tool intended for adults (18 years and older). We do not knowingly collect personal data from children under the age of 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. International data transfers

Because our service providers (Supabase, Cloudflare, OneSignal) operate servers outside Rwanda, your data may be transferred to and stored in the United States or other countries. These transfers are made under appropriate safeguards consistent with Rwandan data protection law.

We have a Data Processing Agreement in place with Supabase Inc. as our primary data processor.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify active users by email or through the app at least 14 days before the changes take effect.

The "Last updated" date at the top of this page always reflects the most recent revision.

11. Contact us

For any privacy-related questions, requests, or concerns:

You also have the right to lodge a complaint with the National Cyber Security Authority (NCSA) of Rwanda at dpo.gov.rw.

Questions about your data?

We take privacy seriously. Reach out and we'll respond within 30 days.

privacy@domliftapp.com