Privacy Policy

This Privacy Policy explains what personal information Huduma collects from Clients and Pros using our platform, why we collect it, and the choices you have. It applies alongside our Terms of Use. If you do not agree with this policy, please do not use the Platform.

• Account information - name, email address, phone number, and password (handled by our authentication provider; we never see your password in plain text).
• Pro application information - service categories, equipment, coverage area, base rate, availability, and Mobile Money number, submitted when you apply to become a Pro.
• Location information - the address you provide for service matching or coverage area, and approximate geolocation derived from it.
• Identity verification data - for Pros, the government-issued ID and biometric selfie you submit to our verification provider (Didit) to confirm your identity before your profile goes live.
• Payment information - Mobile Money account details needed to process a booking payment or payout. Card or Mobile Money credentials are handled directly by our licensed payment partners - Huduma does not store full payment credentials on its own servers.
• Usage and device information - pages visited, actions taken on the Platform, browser/device type, and IP address, collected automatically to keep the Platform secure and working correctly.

• To create and secure your account, and authenticate your sign-in;
• To operate the marketplace - matching Clients with nearby Pros and facilitating bookings;
• To verify a Pro's identity before their profile is shown to Clients;
• To process payments and Mobile Money escrow releases;
• To send account, booking, and verification-related communications (email, SMS, or WhatsApp);
• To detect, prevent, and investigate fraud, abuse, or security incidents;
• To improve the Platform and understand how it's used.

We do not sell your personal information.

• Between Clients and Pros, as needed to fulfill a booking - for example, a Client sees a verified Pro's public profile, and a Pro sees the job details and location for a booking they've accepted.
• Service providers we rely on to operate the Platform, including our authentication and database provider (Supabase), identity verification provider (Didit), bot-protection provider (Cloudflare Turnstile), address autocomplete provider (Google Maps Platform), and Mobile Money/payment processors. These providers only receive the information needed to perform their function for us.
• Legal and safety reasons - if required by law, legal process, or to protect the rights, property, or safety of Huduma, our users, or the public.
• Business transfers- if Huduma is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to this policy's protections continuing to apply.

We use a limited set of essential cookies and local storage to keep you signed in and to protect the Platform from bots (via Cloudflare Turnstile). We may also use analytics tools to understand aggregate usage of the Platform. You can control cookies through your browser settings, though disabling essential cookies may prevent parts of the Platform from working.

We retain personal information for as long as your account is active and as needed to provide the Platform, comply with our legal obligations (including tax and financial record-keeping), resolve disputes, and enforce our agreements. Identity verification records are retained for the period required by applicable know-your-customer and anti-fraud regulations in the countries we operate in.

Depending on where you live, you may have the right to access, correct, or request deletion of your personal information, or to object to certain uses of it. You can update most of your information directly from your account, request deletion directly through our account and data deletion page, or contact us using the details below to make a request. We will respond within a reasonable time and consistent with applicable law.

The Platform is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal information from children. If we learn that we have, we will delete it.

Huduma operates across Uganda, Kenya, and Rwanda, and works with service providers that may process data outside your home country. Where we transfer personal information across borders, we take steps to ensure it remains protected consistent with this policy and applicable data protection law.

We use technical and organizational measures - including encryption in transit, access controls, and working with reputable infrastructure providers - to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Platform or by email.

Questions about this policy or requests regarding your personal information can be sent to [email protected].