Art Soko — Privacy Policy

Last Updated: October 2026

This Privacy Policy explains how Art Soko ("Art Soko", "we", "us" or "our") collects, uses, stores and protects personal information when you use the Art Soko mobile app and the website artsoko.co.ke (together, the "Service").

We handle personal information in line with Kenya's Data Protection Act, 2019.

1. Who We Are

Art Soko is a marketplace that connects artists with people interested in discovering and buying artwork. It is operated by Ephantus Gitau Maina, an independent operator based in Kenya, who is the data controller for the Service.

Operator: Art Soko, operated by Ephantus Gitau Maina
Privacy & Support Email: [email protected]
Country: Kenya

2. Who Can Use Art Soko

Art Soko is only for people aged 18 or older. When you sign up, you confirm that you are 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a child has created an account, email [email protected] and we will close the account and delete its data.

3. Information We Collect

We collect only what we need to run and protect the Service.

3.1 Account and profile information

• your name;
• email address;
• password (stored securely by our authentication provider; we cannot see it);
• account type (Artist or Buyer);
• your choices of who can see your profile photo and who can see your username;
• account status (for example, active, restricted or suspended);
• an optional username (shown as @username);
• an optional profile photo; and
• for artists, an optional short bio ("About you").

Profile photos are cropped, resized and re-saved before upload, which removes hidden photo information such as GPS location.

Who can see your profile: your name can be seen by other signed-in users, for example the people you chat with or send order requests to. You choose who can see your profile photo and, separately, who can see your username, under Edit profile → Settings in the app or Menu → Settings on the website:

• Everyone: anyone signed in to Art Soko (this is the default);
• Only people I chat with: people you have a chat or an order request with; or
• No one: only you. Others see just your name.

An artist's name and bio also appear on their artist page, and their name appears next to their listings. Your email address and phone number are never shown to other users.

You can change your name, username, profile photo and bio in the app or on the website (Menu → Edit profile). Photos added on the website are cropped, resized and re-saved in your browser before upload, just like in the app.

3.2 Artwork listings (artists)

• artwork photos;
• titles, descriptions, prices and categories; and
• listing status (for example, under review, public, reserved or sold).

Artwork photos are re-saved before upload, which removes hidden photo information such as GPS location.

Public listings, including the artwork photo, title, description, price and the artist's name, can be seen by anyone using the app or website, and may appear in search engines and link previews.

3.3 Chats

Messages between buyers and artists, with timestamps, the accounts taking part and the artwork the conversation is about, plus any photos or locations you choose to send. Chats, including their photos, are visible only to the people in the conversation.

• Photos are resized and re-saved before upload, which removes hidden photo information such as GPS location. They're stored privately and shown only to the two people in the chat.
• Location is shared only when you tap Location and confirm. It's sent once as a Google Maps link; we don't track your location.
• Text you've typed but not sent (a draft) stays on your phone only.

We also store when each person last opened a conversation, so the other person can see Read under their messages. The typing… signal is sent live and never stored.

If you block someone, we store that you have blocked them so they can no longer message you. The person you block is not told.

If you edit a message, the other person sees the new text marked "Edited". We keep the original wording, seen only by our team, so reported messages can be checked. Deleting a message for everyone removes both.

Chats work the same in the app and on the website. Photos and locations can be sent from the app only.

Voice calls (app). You can call the other person in a chat. Calls go over the internet; phone numbers are never shared and calls are not recorded. The sound passes through our calling provider (LiveKit) only while the call is happening and is not stored. We keep a record of each call (who called whom, in which chat, when, whether it was answered, and how long it lasted), which both people see in the chat. The app uses your microphone only during a call, after you allow it. When someone calls you, your phone shows the caller's first name and the initial of their last name (for example "Kamau N.") on its ringing screen, which can appear on the lock screen. You choose who can call you, or turn calls off, in Settings → Calls. Blocking someone also stops their calls.

3.4 Order requests

Which artwork a buyer has asked to order, the listed price and the request's status.

If a buyer asks for a return on a completed order, the request (the reason and any note) is sent as a message in their chat with the artist, like any other message.

3.5 Reviews and app ratings

• If you review an order, your first name, star ratings and comment show on the artist's profile.
• If you rate the app ("Enjoying Art Soko?"), only the Art Soko team sees it.

3.6 Reports and moderation records

Reports you make, and the actions our team takes in response, kept so decisions can be checked and reviewed.

3.7 Appeals

If you appeal a decision, we keep your message, the decision and our reply. For account appeals we also keep your email address until we've emailed you the outcome, then delete it.

3.8 Notifications

In-app notifications about your account and activity (for example, a new message, an order request or a listing decision). You can delete your own notifications in the app.

3.9 Device and technical information

• Push notification tokens: a device identifier used only to deliver notifications. It is removed when you sign out.
• Crash reports (app): when enabled, technical details about app errors such as device model, app version and error details. Names, email addresses, phone numbers and login tokens are removed before a report is sent.
• Website sign-in: the website keeps you signed in by storing a login token in your browser's local storage. We do not use advertising or tracking cookies.
• Opening the app from the website: Open in the app buttons and shared artsoko.co.ke links open the app on the matching screen (for example, one artwork or your orders). The link contains only the page address, never your name, email or other personal information.

4. How We Use Your Information

We do not sell, rent or trade your personal information, and we do not use it for advertising.

5. Service Providers We Use

We use trusted providers to run Art Soko. They process information only on our instructions.

5.1 Transfers outside Kenya

These providers may store or process information on servers outside Kenya. Where this happens, we rely on the safeguards required by the Data Protection Act, such as the providers' contractual data-protection commitments.

6. When We Share Information

Apart from the service providers above, we share information only where reasonably necessary to:

• comply with the law or a lawful request from authorities. We share information with the police or courts only when the law requires it, for example a court order, and only what is asked for. We keep a record of every request;
• investigate suspected fraud or abuse;
• protect the safety, rights or property of users or others;
• enforce our Terms of Service; or
• protect the security of the Service.

7. Chat Privacy & Safety Reviews

Chat messages are not public. You can delete messages for yourself, or delete your own messages for both people (the text and photo are then removed). If a message is reported, a copy of that message is shared with the Art Soko team for review. To decide the report, the team may read the rest of that conversation (photos are not shown). Every time this happens, it is recorded.

We may also review relevant chat messages where reasonably necessary to investigate reported fraud, harassment or threats, scams, serious breaches of our Community Guidelines, or security incidents. We limit any review to what the investigation needs.

8. How Long We Keep Information

When you delete your account: your login (email and password), profile (name, username, photo, bio), listings and their photos, notifications and blocks are deleted, and the conversations and orders disappear from your side. The other person keeps their own copy of your conversations and order requests, with your name and photo replaced by "Deleted user", and can no longer send you messages. We keep a short record of the request (your name, the reason you gave and when it was completed, without your email address) so we can show that it was handled.

When we close an account for breaking our rules, or block an email address: we keep the email address and a scrambled code made from it, only so the same email can't be used to open a new account. Only our admins can see it, and we delete it if the email is unblocked.

We may keep limited information longer only where needed to prevent fraud, resolve a dispute or meet a legal obligation, and only for as long as that need lasts.

9. Security

We use reasonable technical and organisational measures to protect your information, including encrypted connections, access controls that limit each user to their own data, and restricted admin access.

No internet service can be completely secure. Please keep your password private and tell us straight away if you think your account has been accessed without permission.

If a data breach creates a real risk to you, we will notify the Office of the Data Protection Commissioner and, where required, tell affected users, as the law requires.

10. Your Rights

Under the Data Protection Act, you have the right to:

• be told how your information is used;
• access the personal information we hold about you;
• have inaccurate or misleading information corrected (you can edit your name, username, photo and bio yourself by tapping your profile card in Account, or in Studio for artists);
• have your information deleted;
• object to certain processing;
• restrict processing in some circumstances; and
• receive your information in a portable format.

To use any of these rights, email [email protected]. We may need to confirm your identity first. We aim to respond within 14 days, or sooner where the law requires.

10.1 Complaints

If you are unhappy with how we have handled your information, please contact us first. You also have the right to complain to the Office of the Data Protection Commissioner (ODPC): https://www.odpc.go.ke

11. Deleting Your Account

You can ask us to delete your account:

• In the app: open Edit profile → Settings → Delete account and choose a reason;
• On the website: Menu → Settings → Delete account opens the same screen in the app;
• Online: https://artsoko.co.ke/delete-account
• By email: [email protected]

Every request is reviewed by the Art Soko team, and your account is deleted within 72 hours. You can't sign in once it has been deleted. Your information is then deleted or anonymised as described in Section 8.

11.1 Pausing instead

If you just want a break, choose Pause my account on the same screen. You're signed out, your listings are hidden and nobody can message you, but nothing is deleted. Sign in again and confirm to reactivate your account.

12. Changes to This Policy

We may update this Privacy Policy as the Service or the law changes. If the changes are significant, we will update the "Last Updated" date and let you know through the Service or by email.

13. Contact Us

For privacy questions, data requests or account deletion:

Art Soko
Email: [email protected]
Operator: Art Soko, operated by Ephantus Gitau Maina
Country: Kenya
Website: https://artsoko.co.ke