Version 2026-06-13.2·Effective 12 June 2026
This Privacy Policy explains how GENO Wellness Ltd. ("GENO", "we", "us") handles your information when you use the GENO Provider mobile application (the "App") to run your wellness practice on the GENO platform. GENO is incorporated in Kenya and primarily serves the East African Community (EAC).
The Short Version:
By using GENO Provider you agree to this Privacy Policy and to the GENO Provider Terms and Conditions.
| Data Controller | GENO Wellness Ltd. (Kenya) |
| Registered Office | Nairobi, Kenya |
| Primary Regulator | Office of the Data Protection Commissioner (ODPC), Kenya |
| privacy@genoessence.com | |
| Provider Support | providers@genoessence.com |
| Web | https://genoessence.com/privacy/geno-provider |
When you use GENO Provider, you are also a data controller for the personal information your clients give you (booking notes, session notes, payment context). GENO acts as your data processor for that content. The data-processing terms attached to the Provider Terms govern that relationship.
We retain verification and tax data only as long as we need them to keep your account verified, plus the period required by tax law in your country.
| Purpose | Lawful Basis (Kenya DPA, s. 30) |
|---|---|
| Verifying your identity and credentials | Performance of our contract + legal obligation |
| Listing your profile and matching you with clients | Performance of our contract with you |
| Running bookings, sessions, and the live-call infrastructure | Performance of our contract with you |
| Routing your earnings to your registered mobile-money or bank account | Performance of our contract + legal obligation under applicable tax law |
| Sending booking, session, message, and earnings notifications | Your consent |
| Detecting and preventing fraud, money laundering, or abuse of clients | Legal obligation + our legitimate interest in a safe marketplace |
| Aggregated platform metrics | Our legitimate interest |
| Complying with tax, AML, and court orders | Legal obligation |
| Marketing emails about new provider features | Your consent (off by default) |
Your display name, profile photo, public bio, specializations, hourly rate, and the reviews you have publicly received are visible to clients searching the GENO platform. Your phone number, email, tax PIN, and payout details are never shown to clients.
We will disclose information when required by:
Where the law permits we will notify you first.
If GENO is acquired or restructured, your information may transfer to the acquirer subject to the same privacy commitments. We will notify you in advance.
We take the security of your personal data seriously and apply technical and organisational measures appropriate to the risk, including:
If we ever discover a personal-data breach that is likely to result in a risk to your rights, we will notify the ODPC and, where required, you, within the timeframe set by section 43 of the Kenya DPA.
We keep personal data only as long as we need it, or as long as the law requires. As a provider:
When you delete your provider account we erase your profile, photo, public bio and credentials within a reasonable period, except for the records we must keep by tax or AML law, which are isolated from the live service.
Some of the service providers we work with operate from outside the EAC, which means your personal data may be transferred outside Kenya. We only work with providers that contractually commit to data-protection standards equivalent to or better than the Kenya DPA, and we add additional safeguards as required by sections 48–49 of the Kenya DPA and equivalent provisions across the EAC.
Under section 26 of the Kenya Data Protection Act, 2019 you have the right to be informed of the use of your data, access it, correct it, ask for deletion, object to processing, restrict processing, and receive a copy of it in a structured format. Equivalent rights apply across the EAC.
You can exercise these rights inside the App (Profile → Security & Privacy, Profile → Notifications) or via privacy@genoessence.com.
If you believe we have mishandled your data you can complain to the ODPC (https://www.odpc.go.ke) or the equivalent authority in your country.
GENO Provider is not directed at children. Providers must be at least 18 years old. If you believe an under-18 has registered as a provider please email privacy@genoessence.com so we can disable the account.
If you provide services from outside the EAC the equivalent of the rights in §9 applies under your local data-protection law (EU GDPR, UK GDPR, CCPA / CPRA, etc.). We rely on Standard Contractual Clauses for cross-border transfers to the United States and we do not "sell" or "share" your personal information for cross-context behavioural advertising.
The App does not use third-party advertising SDKs, behavioural-tracking pixels, or session-recording tools.
We may update this Policy. The "Effective" date is updated whenever a new version is published. For material changes we will show you the new policy inside the App and ask you to acknowledge it before continuing, and email the address on your account in advance.
GENO Wellness Ltd. Nairobi, Kenya
Effective from the "Last updated" date shown at the top of this page.
