Privacy Policy
Last updated: 7 November 2026
TundaCar collects only what it needs to run a car marketplace: your account, your ads and your messages. We never sell your data, and we never show your full name or phone number on your profile. This policy applies to the TundaCar app, the TundaCar PRO app for car galleries, and tundacars.com.
1. Who we are
TundaCar is run by [Operator legal name], [postal address], Uganda ("we", "us"). We are the data controller for the personal data described here. Contact us about privacy at [privacy@tundacars.com].
2. What we collect
| Data | When | Who can see it |
|---|---|---|
| Username and password | Sign-up | Username: everyone. Password: stored only as a secure hash, never readable by us |
| First name, last name, district | Sign-up | Everyone sees only "First L." and your district |
| Mobile phone number | Sign-up, Edit profile | Only you, and buyers who tap Call or WhatsApp on one of your live ads while signed in |
| Ads: car details, price, headline, description, area | Posting an ad | Everyone, once a moderator approves it |
| Photos and video of the car | Posting an ad | Everyone, once approved. Photos are stamped with our logo and the ad number |
| Map location of the car (optional) | Posting an ad, or a gallery's address in TundaCar PRO | Everyone, on the ad page |
| Messages | Chatting about an ad | Only the people in the conversation, and our moderators when a message is reported |
| Favourites, saved searches, blocked users | Using the app | Only you. Sellers see how many people saved an ad, never who |
| Reports you file | Reporting an ad | Our moderators, who never see who filed it |
| Payment records: amount, network, last 3 digits of the paying number, reference | Paying for a fee or promotion | You and our admins |
| Device push token and app language | Allowing notifications | Only our systems |
| Ad views (a daily count per ad) | Opening an ad | Sellers see the count, not who viewed |
We do not collect your contacts, your precise location in the background, or advertising identifiers. The app asks for your location only when you tap "My location" on a map, and uses it only to place the pin.
3. Why we use it
- To run your account and the marketplace: sign-in, publishing ads, chat, favourites and notifications.
- To keep the marketplace safe: we verify phone numbers by SMS code, review every ad before it goes live, act on reports, and limit how many sellers' numbers one person can see per day to stop number harvesting.
- To take payments for listing fees, promotions and gallery plans.
- To improve the service: view counts and aggregate statistics.
- To meet legal obligations, such as keeping payment records and answering lawful requests from authorities.
Under the Data Protection and Privacy Act, 2019, we rely on your consent (given at sign-up and when you allow notifications or location), on what is necessary to provide the service you asked for, and on our legal obligations. You can withdraw consent at any time by changing your phone's settings or deleting your account.
4. Who we share it with
We share data only with providers that run parts of the service for us, under contracts that require them to protect it:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage | European Union (Frankfurt, Germany) |
| Google Firebase | Delivering push notifications (message text is never sent) | Global |
| Google Maps | Showing and picking map locations | Global |
| EgoSMS | Sending SMS verification and password reset codes | Uganda |
| Flutterwave | Mobile Money payments (MTN, Airtel) | Uganda and abroad |
We also show a seller's phone number to signed-in buyers who tap Call or WhatsApp on a live ad, and we may disclose data when the law requires it or to protect users from fraud. We never sell personal data or share it for advertising.
5. Transfers outside Uganda
Our database is hosted in the European Union, and some providers operate globally. We use providers that offer protection at least equal to Ugandan law, as the Data Protection and Privacy Act, 2019 requires.
6. How long we keep it
- Your account and ads: until you delete them. Expired ads stay in your account, hidden from others, until you delete them.
- Messages: until the conversation's ad or your account is deleted.
- SMS codes: they expire after 10 minutes; we keep only a hash.
- Payment records and ad deletion logs: [7] years, for accounting and fraud checks, even after the ad or account is gone.
- Daily records of which ads' numbers you viewed: [30] days.
7. Your rights
You can see and correct your name, district and phone under Profile → Edit profile. You can delete any ad from My listings, and delete your whole account under Profile → Privacy and data, which removes your profile, ads, photos and messages. A gallery owner must hand the gallery over first.
You may also ask us for a copy of your data, object to a use of it, or ask us to correct or erase it, by writing to [privacy@tundacars.com]. We answer within [30] days. If you are not satisfied, you can complain to the Personal Data Protection Office of Uganda.
8. Security
Passwords are hashed, connections are encrypted, and every table is protected by access rules so users can read only what they are allowed to. Full names and phone numbers are stored separately from public profiles. No system is perfectly secure; if a breach puts your data at risk, we will tell you and the regulator as the law requires.
9. Children
TundaCar is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has an account, tell us and we will delete it.
10. Changes
We will post any change here with a new date, and tell you in the app before an important change takes effect.
11. Contact
[Operator legal name], [postal address], [privacy@tundacars.com], [phone].