Privacy Policy
Version 1.0 · Effective 1 May 2026
Rentiwo is a product of Technoidslab Ltd, 432 Mengo Hill Road, Kampala – Uganda
1. Introduction
Rentiwo, a product of Technoidslab Ltd, is committed to protecting the privacy of our users and the personal data of tenants managed through our Platform. This Privacy Policy explains what information we collect, how we use it, and your rights under the Uganda Data Protection and Privacy Act, 2019 (DPPA).
By using Rentiwo, you acknowledge that you have read and understood this Policy.
2. Information We Collect
2.1 Information you provide directly
- Account details: full name, email address, phone number, password (stored hashed — never in plain text)
- Property and unit information: addresses, property names, rent amounts, lease terms
- Tenant information: names, phone numbers, national ID numbers (if entered), due dates
- Payment records: amounts paid, payment dates, mobile money transaction references
- Expense records, caretaker assignments, and any notes you enter
2.2 Information collected automatically
- Log data: IP address, browser type, pages visited, actions taken, timestamps
- Device and session information
- Platform usage patterns (used for improving the service only)
2.3 Information from third parties
- Payment transaction status from MTN Mobile Money and Airtel Money APIs
- SMS delivery status from our SMS provider (Twilio)
3. How We Use Your Information
We use your information to:
- Create and manage your account and subscription
- Provide all Platform features including rent tracking, tenant management, and reporting
- Send automated SMS and email reminders to tenants on your instruction
- Generate reports and summaries of your property portfolio
- Process and display payment transactions
- Communicate with you about your account, billing, and Platform updates
- Detect and prevent fraud, abuse, and unauthorised access
- Comply with legal and regulatory obligations under Ugandan law
We do not use your data for advertising or sell it to any third party.
4. Tenant Data — Landlord Responsibilities
When you (a Landlord) enter your tenants' personal data into the Platform, you are acting as the data controller for that data under the DPPA. Rentiwo / Technoidslab Ltd acts as a data processor — we process tenant data only on your instructions.
As a Landlord, you are responsible for:
- Having a lawful basis (such as your tenancy agreement or tenant consent) for collecting and processing tenant personal data
- Informing your tenants that their data is being managed through a digital platform
- Ensuring tenant data you enter is accurate and kept up to date
5. Sharing of Information
We do not sell your personal data. We share data only in the following circumstances:
- SMS provider (Twilio): Tenant phone numbers and message content are transmitted to Twilio to deliver SMS reminders on your behalf
- Email delivery: Tenant email addresses may be used to send rent reminders via our email delivery service
- Mobile money providers (MTN, Airtel): Minimum data (phone number, amount) is shared to initiate and verify payment requests
- Hosting and infrastructure: Our cloud infrastructure provider processes data as part of operating the Platform, under contractual data protection obligations
- Legal obligations: We may disclose data when required by Ugandan law, a court order, or a legitimate regulatory authority
- Business transfer: If Technoidslab Ltd is acquired or merged, user data may transfer to the new entity with prior notice to you
6. SMS and Email Communications
When you trigger a reminder through the Platform, the tenant's contact details and a message generated from your rental data are sent to our third-party provider for delivery. We log the send status (sent, failed, delivered) to help you track communication history. Recipients may incur standard mobile carrier charges for SMS received.
7. Data Retention
| Data type | Retention period |
|---|---|
| Active account and property data | While account is active |
| Data after subscription expiry / termination | 90 days, then permanently deleted |
| Payment transaction records | Up to 7 years (Ugandan financial record-keeping obligations) |
| SMS and reminder logs | 12 months |
| Server access logs | 90 days |
You may request earlier deletion of your data at any time (see Section 9).
8. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
- Encrypted data transmission (HTTPS/TLS) for all Platform traffic
- Passwords stored using bcrypt hashing — we never store plain-text passwords
- Role-based access controls (landlords cannot access other landlords' data)
- Regular security reviews of the Platform
In the event of a data breach likely to affect your rights under the DPPA, we will notify you as required by law.
9. Your Rights Under the DPPA
Under the Uganda Data Protection and Privacy Act, 2019, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data (subject to legal retention obligations)
- Objection: Object to certain types of processing of your data
- Data portability: Request your data in a structured, machine-readable format
To exercise these rights, contact us at privacy@technoidslab.com. We will respond within 21 days as required by the DPPA.
If you are a tenant whose data has been entered by a Landlord, contact that Landlord directly as they are the data controller. You may also contact us if you believe your data is being processed unlawfully.
10. Cookies
Rentiwo uses only essential session cookies required for authentication and Platform functionality. We do not use advertising, tracking, or analytics cookies. You can configure your browser to block cookies, but this may affect your ability to log in.
11. Children's Privacy
The Platform is intended for adults (18+) in a professional property management context. We do not knowingly collect data from persons under 18. Contact us immediately at privacy@technoidslab.com if you believe a minor's data has been collected.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform, and where required by the DPPA, your renewed acknowledgement will be sought.
13. Data Controller and Processor
Technoidslab Ltd (operating Rentiwo) is the data controller for all user account data. Landlords are independent data controllers for their tenants' personal data; Technoidslab Ltd acts as data processor for that data.
14. Contact and Complaints
Technoidslab Ltd — Privacy Team
432 Mengo Hill Road, Kampala – Uganda
Email: privacy@technoidslab.com
If you are not satisfied with our response, you have the right to lodge a complaint with the National Information Technology Authority – Uganda (NITA-U), which oversees data protection compliance under the DPPA.