Privacy Policy

Last updated: October 7, 2026. This applies to the Cada mobile app and website.

Cada is operated by ENOMARA INVESTMENTS LTD (company number PVT-8Z1Z3D33), Eden Square, Sarit, Westlands, Nairobi, P.O. Box 568 - 00606, Sarit Centre, which is the data controller for the personal data described here. Questions and requests about your data: [email protected].

1. What we collect

  • Account and profile: name, email, phone number, profile photo, and choices you save in your profile.
  • How you use the app: for example when you open features, run searches, or take actions—we log this to run and improve the service. We do not use a separate crash-reporting product in the app today.
  • Location (if you allow it): to help with addresses and finding garages near you, as explained when the app asks for permission.
  • Messages and alerts: chats and notices about cars, bookings, and help.
  • Seller checks: your ID number, KRA PIN and logbook details when you sell or list a car through Cada. ID photos and documents are private and never shown on listings.

2. How we use it

We use your information to run the marketplace, sign you in, tailor what you see, handle garage bookings, follow the law, stop misuse, and make the product better. We do not sell your personal information.

3. Who can see it

We work with trusted partners who help us deliver the service—the same way most apps use outside help for things like servers, speed and online safety in front of our website and API, sign-in, email, maps, and push notifications. They may only use your data to provide those services for us. Independent Cada agents who sign up car yards and, when we ask, help buyers may also see your details; they may use them only for that, on our written instructions. We may also release information when the law requires it or as part of a business change allowed by law.

4. Closing your account and how long we keep data

To close your account: open the Cada app, go to your profile or account area, and choose Close account (wording may vary slightly). You need to be logged in. After you confirm, you will not be able to sign in again.

What we delete and what we may keep: we may keep some records where the law, taxes, fraud prevention, or disputes require it, and to protect people who bought, sold, or messaged with you (for example completed orders or conversations). We cannot always delete every copy of everything right away in those cases. Around 30 days after you close your account, we automatically anonymize the personal details on your profile — such as your name, email, phone number, and photo — and keep only the records the law or those protections require.

If you want a copy of your data, to fix something wrong, or to move your data elsewhere, contact us using the details on our site or in the app. We will help where we can within what the law allows.

Facebook, Instagram, TikTok and YouTube connections: a business that uses Social posting can connect its own Facebook Page, the Instagram professional account linked to it, its TikTok account and its YouTube channel. We keep only what posting needs: the Page, account or channel name and id, the access or refresh token (encrypted, never shown or shared), and a record of the posts made from Cada with their links. For YouTube, Cada asks Google only for permission to upload videos; it uses that permission solely to upload the listing videos someone at the business confirms, as Shorts, and never reads, edits or deletes the channel's other videos. We post only when someone at the business confirms a post. To remove this data, the business admin opens the business portal, goes to Social posting and presses Disconnect: the token is deleted straight away (for YouTube we also ask Google to revoke Cada's access). You can also remove Cada in your Facebook settings (Business integrations), your TikTok settings or your Google Account's third-party access page, or contact us to delete the post records too. YouTube uploads use the YouTube API Services: by connecting a channel you agree to the YouTube Terms of Service, and Google's use of the data is covered by the Google Privacy Policy.

5. Security

We take sensible steps to protect your information. Traffic between the app and our systems is normally protected with standard web encryption. No online service can promise perfect security.

6. Children and other countries

Cada is not meant for children who need a parent's permission under local law. If you use us from another country, your information may be stored or handled in places where we or our partners operate.

7. Contact

Questions about this policy or your data: use Help in the app or reach us from the contact & feedback page.