Xcobean ID — Privacy Policy

Xcobean ID (id.xcobean.com) is the single sign-on service operated by Xcobean Limited (Nairobi, Kenya). It lets you use one account across Xcobean products (AjiraVerify, NannyImara, billing and others). This policy explains what we collect and why, under the Kenya Data Protection Act, 2019.

What we collect

Account details you provide: name, and any of email, phone number, or password.
National ID — optional; only if you choose to add/verify it for a product that requires identity verification.
Social login identifiers if you sign in with Google or LinkedIn (your provider account id, email, name, profile photo).
Login metadata: timestamps and the product you signed into, for security and audit.

Why we use it

Solely to authenticate you and enable single sign-on across the Xcobean product you choose to access. Lawful bases: your consent and performance of our service to you.

Sharing

When you sign in to a Xcobean product, we share a minimal identity token (your stable account id, and the name/email/phone/National ID you have on file) with that product only, so it can recognise you. We do not sell your data or share it for advertising.

Retention & security

We keep your identity record while your account is active. Passwords are hashed; connections are encrypted (TLS). You can request deletion at any time.

Your rights

Under the DPA 2019 you may access, correct, or delete your data, withdraw consent, and lodge a complaint with the Office of the Data Protection Commissioner (ODPC). Contact privacy@xcobean.com.

Xcobean Limited, Nairobi, Kenya · privacy@xcobean.com · Last updated 2026-06-04