Buffalo Privacy Policy

1. Introduction
Buffalo ("Ride with ease") is operated by MoiTech. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the Data Protection and Privacy Act, 2019 of Uganda. By using Buffalo, you consent to the practices described in this policy.

2. Information We Collect
A. Information You Provide
- Account Information: Name, phone number, email, and profile photo.
- Identity Verification: Government-issued ID, driver licenses, and vehicle documentation (for providers).
- Financial Data: Transaction history related to the Buffalo Wallet. We store transaction references; we do NOT store Mobile Money PINs or full bank card details.
- Logistics Data: For Buffalo Delivery/Marketplace, we collect sender/recipient names, phone numbers, and photos of packages for verification.

B. Automatic Collection
- Location Data: We collect precise location data.
    - For Riders: To match you with providers and track active trips.
    - For Drivers/Providers: We collect real-time location and "last known" location even when the app is closed or in the background. This is mandatory for safety monitoring, fare verification, and service optimization. This data is accessible by Buffalo Admins for security and verified distance tracking.
- Third-Party Services: Our app uses Google Maps API. You are also bound by the Google Privacy Policy.

3. How We Use Your Information
- To provide Services (Rides, Orders, Deliveries).
- Dynamic Pricing: We use location and time data to calculate fares (surges/zones).
- Safety & Security: Real-time Admin monitoring of trips/deliveries to ensure safety.
- Legal Compliance: To comply with tax, transport, and data laws in Uganda.

4. Data Sharing
- With Providers/Merchants: Necessary trip/order details are shared to fulfill requests.
- Legal Authorities: Shared when required by law or to investigate safety incidents/fraud.
- We DO NOT sell your personal data.

5. Your Rights & Account Deletion
Under the Data Protection and Privacy Act, 2019, you have the right to access, rectify, or request deletion of your data.
- Deletion Process:
    1. Upon request, your account is immediately deactivated.
    2. Your User ID is modified to include the request timestamp to prevent immediate re-registration with the same identity during the audit period.
    3. Data enters a 30-day "Cooling-off/Dispute" period.
- Manual Admin Review: Final erasure occurs after 30 days, subject to review to ensure no unpaid balances, pending wallet disputes, open safety reports, or active police investigations exist. This is a security measure to prevent evasion of legal liabilities.

6. Data Retention
- Transaction Records: Retained for 7 years (Ugandan tax law).
- Location Logs: Safety logs are kept for 12 months for audit purposes.

7. Security
We use industry-standard encryption. You are responsible for keeping your login credentials confidential.

8. Contact Information
Buffalo Uganda (MoiTech)
📍 Kahinju Road Plot 29, Fort Portal
📧 buffalo.ug.info@gmail.com | 📞 WhatsApp: +256394899917