Privacy Policy

1. Introduction

Rentiwo, a product of The Technoids General Solutions Ltd (a company registered in Uganda; Rentiwo is built and maintained by its in-house software group, Technoidslab), is committed to protecting the privacy of our users and the personal data of tenants managed through our Platform. This Privacy Policy explains what information we collect, how we use it, and your rights under the Uganda Data Protection and Privacy Act, 2019 (DPPA).

By using Rentiwo, you acknowledge that you have read and understood this Policy.

2. Information We Collect

2.1 Information you provide directly

• Account details: full name, email address, phone number, password (stored hashed — never in plain text)
• Property and unit information: addresses, property names, rent amounts, lease terms
• Tenant information: names, phone numbers, national ID numbers (if entered), due dates
• Payment records: amounts paid, payment dates, mobile money transaction references
• Expense records, caretaker assignments, and any notes you enter

2.2 Information collected automatically

• Log data: IP address, browser type, pages visited, actions taken, timestamps
• Device and session information
• First-party product analytics: records of in-app events (such as sign-up, a payment request, a report generated) linked to your account and, where relevant, your plan, used to understand how the Platform is used and to improve it. These are generated on our own servers — we use no third-party advertising or tracking tools and no analytics or advertising cookies — and are retained for up to 90 days (see Section 7).

2.3 Information from third parties

• Payment transaction status from MTN Mobile Money and Airtel Money APIs
• SMS delivery status from our SMS provider (Twilio)

3. How We Use Your Information

We use your information to:

• Create and manage your account and subscription
• Provide all Platform features including rent tracking, tenant management, and reporting
• Send automated SMS and email reminders to tenants on your instruction
• Generate reports and summaries of your property portfolio
• Process and display payment transactions
• Communicate with you about your account, billing, and Platform updates
• Detect and prevent fraud, abuse, and unauthorised access
• Comply with legal and regulatory obligations under Ugandan law
• With your consent, send you occasional messages about Rentiwo features, tips, and offers (see Section 6)

We do not sell your personal data to anyone, and we do not use it for third-party advertising or ad targeting. We do send our own account holders occasional marketing messages about Rentiwo, which you can opt out of at any time without losing access to essential account, billing, security, and legal messages.

4. Tenant Data — Landlord Responsibilities

When you (a Landlord) enter your tenants' personal data into the Platform, you are acting as the data controller for that data under the DPPA. Rentiwo / The Technoids General Solutions Ltd acts as a data processor — we process tenant data only on your instructions.

As a Landlord, you are responsible for:

• Having a lawful basis (such as your tenancy agreement or tenant consent) for collecting and processing tenant personal data
• Informing your tenants that their data is being managed through a digital platform
• Ensuring tenant data you enter is accurate and kept up to date

5. Sharing of Information

We do not sell your personal data. We share data only in the following circumstances:

• SMS provider (Twilio): Tenant phone numbers and message content are transmitted to Twilio to deliver SMS reminders on your behalf
• Email delivery: Tenant email addresses may be used to send rent reminders via our email delivery service
• Mobile money providers (MTN, Airtel): Minimum data (phone number, amount) is shared to initiate and verify payment requests
• Hosting and infrastructure: Our cloud infrastructure provider processes data as part of operating the Platform, under contractual data protection obligations
• Legal obligations: We may disclose data when required by Ugandan law, a court order, or a legitimate regulatory authority
• Business transfer: If The Technoids General Solutions Ltd is acquired or merged, user data may transfer to the new entity with prior notice to you

6. Communications

6.1 Tenant reminders you send. When you trigger a reminder through the Platform, the tenant's contact details and a message generated from your rental data are sent to our third-party provider for delivery. We log the send status (sent, failed, delivered) to help you track communication history. Recipients may incur standard mobile carrier charges for SMS received.

6.2 Email we send you. We send account holders essential email — about your account, billing, security, and legal or service changes — which you cannot opt out of while you have an account. We also send optional marketing email about Rentiwo features, tips, and offers; every such message carries an unsubscribe link, and you can also manage this from your profile settings. Marketing email is only sent to landlords and administrators, never to tenants added by a landlord.

7. Data Retention

Data type	Retention period
Active account and property data	While account is active
Data after subscription expiry / termination	90 days, then permanently deleted
Payment transaction records	Up to 7 years (Ugandan financial record-keeping obligations)
SMS and reminder logs	12 months
Server access logs	90 days

You may request earlier deletion of your data at any time (see Section 9).

8. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS) for all Platform traffic
• Passwords stored using bcrypt hashing — we never store plain-text passwords
• Role-based access controls (landlords cannot access other landlords' data)
• Regular security reviews of the Platform

If we become aware of a personal data breach affecting your data that is likely to present a risk to your rights under the DPPA, we will notify you without undue delay and, where feasible, within 72 hours of becoming aware of it, describing what happened, the likely impact, and the steps we are taking. Where the DPPA and the Data Protection and Privacy Regulations, 2021 require it, we will also notify the National Information Technology Authority – Uganda (NITA-U) within the applicable time limit.

A breach affecting your tenants' personal data is additionally governed by Section 7 of the Data Processing Agreement, under which we notify you, as the data controller for that data, within 72 hours.

9. Your Rights Under the DPPA

Under the Uganda Data Protection and Privacy Act, 2019, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention obligations)
• Objection: Object to certain types of processing of your data
• Data portability: Request your data in a structured, machine-readable format

To exercise these rights, contact us at privacy@technoidslab.com. We will respond within 21 days as required by the DPPA.

If you are a tenant whose data has been entered by a Landlord, contact that Landlord directly as they are the data controller. You may also contact us if you believe your data is being processed unlawfully.

10. Cookies

Rentiwo uses only essential session cookies required for authentication and Platform functionality. We do not use advertising, tracking, or third-party analytics cookies, and no cookies are used for marketing or ad targeting. Our product analytics (Section 2.2) run on our own servers and do not rely on cookies. You can configure your browser to block cookies, but this may affect your ability to log in.

11. Children's Privacy

The Platform is intended for adults (18+) in a professional property management context. We do not knowingly collect data from persons under 18. Contact us immediately at privacy@technoidslab.com if you believe a minor's data has been collected.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform, and where required by the DPPA, your renewed acknowledgement will be sought.

13. Data Controller and Processor

The Technoids General Solutions Ltd (operating Rentiwo) is the data controller for all user account data. Landlords are independent data controllers for their tenants' personal data; The Technoids General Solutions Ltd acts as data processor for that data.

14. Contact and Complaints

The Technoids General Solutions Ltd — Privacy Team
432 Mengo Hill Road, Kampala – Uganda
Email: privacy@technoidslab.com

If you are not satisfied with our response, you have the right to lodge a complaint with the National Information Technology Authority – Uganda (NITA-U), which oversees data protection compliance under the DPPA.