This policy explains what personal data we collect when you use Tusonde, what we do with it, and the choices you have. Vihlix Limited is the data controller. We follow Uganda's Data Protection and Privacy Act, 2019.
What we collect
- Organizers and committee members: your name and phone number, email address, the one-time codes we send, and the actions you take on a collection (creating it, approving or refusing withdrawals).
- Givers: the name you enter (or "Anonymous"), the phone number the prompt is sent to, the amount, and the transaction reference from our payments partner. Pledges also store the reminder date.
- Meeting records: the names, phone numbers, pledges and cash amounts the committee records at a meeting, and the photographs of roll calls, pledge sheets and cash lists they upload. A photograph is sent to an automated text-recognition service to read it; the service is used only to read the sheet and the rows are confirmed by the committee before they are saved.
- Everyone: basic technical data such as device type and pages visited, used to keep the service working and secure.
We never see or store your mobile money PIN. You enter it on your own phone, on your network's prompt, not on Tusonde.
Signing in with Google
If you choose Google sign-in, Google Firebase Authentication processes your sign-in. We receive your verified email address, name and a Google identity identifier to create or connect your Tusonde account. We do not receive your Google password or access to your Gmail messages. Email and password remain available if you prefer not to use Google.
What we use it for
- running the collection: taking contributions, sending receipts and reminders, routing approvals, paying out;
- showing the public record on the collection page;
- preventing fraud and meeting our legal obligations;
- improving the service.
We do not sell personal data and we do not use it for third-party advertising.
What is public
A collection page shows the Organizer and committee members, the name (or "Anonymous") and amount of each contribution, pledges by name and amount, and each withdrawal with its purpose, charges and recorded approvers. Phone numbers and email addresses are never shown publicly. Meeting records, roll calls, cash lists and the photographs of sheets are visible to the committee only; what the committee chooses to send to the group in a summary or minutes is their decision. Closed collections stay public as a record for the people who gave.
Who we share it with
- our licensed payments partner, to send prompts, take payments and make payouts;
- an automated text-recognition service, to read photographs of meeting sheets a committee member uploads;
- our SMS provider, to deliver codes, receipts and reminders;
- hosting and infrastructure providers that run the service;
- authorities, where the law requires it.
How long we keep it
Collection records are kept for as long as the collection page is public and for the period the law requires for financial records. One-time codes expire within minutes. You can ask us to remove your name from a public list; the amount stays as "Anonymous" so the record still adds up.
Your rights
You can ask what data we hold about you, ask us to correct it, and ask us to delete it where we are not required to keep it. Write to [email protected] from the phone number or email concerned. You may also complain to Uganda's Personal Data Protection Office.
Security
Data is transmitted over encrypted connections and stored with access limited to the people who need it to run the service. No system is perfectly secure; if we learn of a breach that affects you we will tell you.
Changes
We may update this policy. The date at the top shows the current version.