Privacy Policy

This Privacy Policy explains how Nyange (“we”, “us”) collects, uses, shares and protects your personal data when you use the Nyange mobile app, this website, and our delivery and outlet services in Uganda.

What we collect

Account and identity data. Your mobile phone number (used to sign in — we send one-time codes by SMS) and the profile details you provide, such as your name.

Delivery information. The delivery addresses you save, including any location coordinates you choose to set so a delivery agent can find you.

Orders and transactions. Your carts, orders, refill exchanges and related transaction records. Orders are paid in cash on delivery or at an outlet counter — we do not collect card or bank details.

Device and technical data. Identifiers needed to deliver push notifications to your device, app installation identifiers, and technical diagnostics (such as crash and error reports) that help us keep the app working.

Support communications. Messages you send us when you ask for help.

This website. We measure how the site is used, so we can tell whether people who land here go on to install the app: the pages you view, the page or search that referred you, clicks on links and buttons, your browser, device type and screen size, and the approximate area — country and city, never a precise position — worked out from your IP address. This is carried out for us by PostHog, and that data is processed in the United States.

No cookies, and nothing kept on your device. The identifier that links one page view to the next lives only in your browser’s memory, for as long as the page is open, so we cannot recognise you on a later visit or build a profile of you. We set no cookies, use no advertising trackers, do not track you across other websites, and never sell this data. The account-deletion form is left out of this measurement altogether: we record that a request was sent, never anything you typed into it.

How we use your data

To provide the service: sign-in, order placement, fulfilment, delivery and refill exchanges.
To notify you about your orders and deliveries, including by SMS and push notification.
To operate safely: preventing fraud and abuse, securing accounts, and keeping auditable records of order and cash handling.
To meet legal obligations, including tax and commercial record-keeping.
To improve the service using technical diagnostics.
To understand how this website is used — which pages people read, and whether they go on to install the app — so we can make it better.

We do not sell your personal data, and we do not use it for third-party advertising.

Our staff and delivery agents — outlet staff and delivery agents see the order details needed to prepare and deliver your order (such as your name, phone number and delivery address).
Service providers acting on our instructions — categories: cloud infrastructure and hosting providers, SMS delivery partners, push-notification delivery services, error-diagnostics services, and the website-analytics provider described above. They process data only to provide their service to us and are bound by contractual confidentiality and data-protection obligations.
Authorities — where disclosure is required by applicable law or a lawful request.

Where your data is processed

Our service providers may store and process data in data centres located outside Uganda. Where that happens, we take steps designed to ensure your data receives adequate protection consistent with Ugandan data-protection law. Specifically, the website-measurement data described under This website above is processed in the United States.

How long we keep it

We keep your account data while your account is active. Order, transaction and audit records are kept for as long as required for legitimate business purposes and statutory retention periods (for example tax and commercial record-keeping), after which they are deleted or anonymised.

Deleting your account

You can ask us to delete your Nyange account and the personal data attached to it, in two ways:

In the app — Settings → Delete account. You are already signed in, so nothing further is needed to confirm who you are.
On this site — Delete your account, which works whether or not you still have the app installed. A member of our team reviews the request and may contact you to confirm you are the account holder. We never tell a public form whether a phone number has a Nyange account.

Once confirmed, the account is scheduled for deletion 30 days later. Signing in to the app during those 30 days cancels the deletion and restores the account. After that the data is erased or anonymised, and signing up again with the same number creates a new account with no connection to the old one.

If an order is still on its way, or a refund is still waiting for you to collect, deletion waits until that is settled — we will tell you what is holding it up. Any unclaimed referral reward is forfeited when the account is deleted.

What is erased: your name, phone number and the sign-in attached to them; your saved delivery addresses and any location you pinned; the recipient name, phone number, street address and delivery instructions stored on past orders; your cart; and the push-notification registration for each of your devices.

What survives, and why: we are legally required to keep order, transaction and receipt records for tax and commercial record-keeping, so those records remain — with your name, phone number and street address removed from the order records, and the delivery area (the zone, not the street) retained. An already-issued receipt is a tax document that cannot be altered after the fact, so the name and phone number printed on it stay on it. Our internal audit trail also remains; it never held your name, phone number or address. This is not total erasure, and we would rather say so than imply everything disappears.

Your rights

Subject to applicable law — including the Data Protection and Privacy Act, 2019 (Uganda) — you may request access to, correction of, or deletion of your personal data, and you may object to certain processing. To exercise a right, contact us using the details below; to delete your account specifically, see Deleting your account above. You also have the right to lodge a complaint with the Personal Data Protection Office.

Security

We protect your data with technical and organisational measures, including encryption of data in transit and access controls that limit who can see your data to those who need it for their role.

Children

The service is intended for adults aged 18 and over. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new effective date, and where changes are significant we will notify you in the app.

Contact

Questions or requests about your personal data: support@nyange.app.