Privacy Policy

1. Information we collect

We collect:

• Account details you give us — your name, email address, phone number, a password (stored only in encrypted/hashed form), and optionally a profile picture and short bio. A username is generated for your public pages.
• Content you create — QR codes, publications, images, audio, PDFs, digital cards, listings, and similar, along with the settings you choose.
• Transaction data — records of credits you buy, items you create, sales you make, and payouts, including amounts and payment references. Payments are processed by our mobile-money payment provider; we do not collect or store card numbers or bank-card details.
• Buyer & order data — if you buy through a seller's page, we collect the name, email, and phone number you provide so the order can be delivered.
• Usage & device data — scans, page views, and interactions used to power creator dashboards; device type; referrer; and approximate location (country, region, city) derived from your IP address. Your IP address is stored only as a one-way hash — we do not keep the raw address.

2. How we use your data

We use personal data to operate and provide the Platform; create and secure your account; process payments and payouts; deliver what buyers purchase; show creators analytics about their codes and pages; prevent fraud and abuse; comply with legal and accounting obligations; and contact you about your account or, where you've agreed, about the service. We do not sell your personal data.

3. Cookies & similar technologies

We use a small number of cookies: a session cookie to keep you signed in; an analytics visitor cookie (“tq_sid”) to count unique visits to public pages; and optional convenience cookies (for example to remember buyer details or your purchase library). Most browsers let you block or delete cookies, though some features may not work without them.

4. Analytics & visitor data

When someone scans a code or visits a public page, we record anonymised interaction data such as device type, approximate country and city, and referrer, so creators can see how their codes and pages perform. Visitor IP addresses are only ever stored as a one-way hash, never in raw form.

5. Sharing & third parties

We share personal data only as needed to run the Platform, including with:

• Our payment provider (Yo! Payments) to process mobile-money collections and payouts;
• Email and infrastructure providers that deliver messages, host the service, and protect it (including our content-delivery and network security providers);
• A geo-IP lookup service to estimate approximate location from an IP address;
• Sellers — a buyer's contact details are shared with the relevant seller so they can fulfil the order; and
• Authorities where we are required to by law or to protect rights, safety, and the Platform.

We do not sell personal data or share it for others' advertising.

6. International transfers

Some of our providers may process data outside Uganda. Where that happens, we take reasonable steps to ensure your data remains protected to a standard consistent with this policy and applicable law.

7. How long we keep it

We keep personal data for as long as your account is active and as needed to provide the Platform. We may retain certain records for longer where required for legal, tax, accounting, or fraud-prevention purposes, after which they are deleted or anonymised.

8. How we protect it

We use technical and organisational measures to protect personal data — including encrypted connections, hashed passwords, and hashed IP addresses. No system is perfectly secure, but we work to keep your data safe and to respond appropriately to any incident.

9. Your rights & choices

Subject to Uganda's Data Protection and Privacy Act, 2019, you may access or update your information from your profile, ask us to correct or delete your data, object to or restrict certain processing, and unsubscribe from non-essential emails using the link in those messages. To make a request, contact us using the details below. Some records may be retained where the law allows or requires it.

10. Children

The Platform is not intended for people under 18, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will remove it.

11. Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date above. Significant changes may also be notified in the app or by email.

12. Contact us

For any privacy question or request, email [email protected] or contact us. Data controller: The Corridor Technologies Limited, Uganda.