1 Who We Are
2 Information We Collect
2.1 Information You Provide
| Data | Required? | Purpose |
|---|---|---|
| Phone number | Required | Account creation and authentication (OTP verification) |
| Full name | Optional | Display name on your profile and bookings |
| Email address | Optional | Account recovery and notifications |
| Garage / business name | Required for mechanics | Mechanic profile shown to motorists |
| Service specialties | Required for mechanics | Mechanic discovery and filtering |
| Vehicle information | Optional | Pre-fill booking requests |
| Chat messages | As needed | Communication between motorists and mechanics |
2.2 Location Information
When you use the app, we request access to your device's precise location
(ACCESS_FINE_LOCATION) and approximate location
(ACCESS_COARSE_LOCATION). Location is used to:
- Show nearby mechanics on the map
- Pre-fill your location in a booking request
- Display real-time mechanic arrival tracking
Location is collected only while you are actively using the app (foreground only). We do not track your location in the background. You can revoke location permission at any time in your device settings; this will disable map and tracking features.
2.3 Payment Information
Payments are processed via Relworx, a licensed Ugandan payment gateway. To initiate a mobile money payment, we transmit your mobile money phone number (MSISDN), booking amount, currency (UGX), and a unique transaction reference to Relworx's servers. We do not store full mobile money PINs or card numbers on our servers. Transaction records (amount, status, reference ID) are stored in our database for booking history and dispute resolution.
2.4 Automatically Collected Information
- Firebase Cloud Messaging (FCM) device token — to deliver push notifications
- App usage logs and crash reports collected by Firebase for stability monitoring
- Device type and OS version (collected by Firebase Analytics)
3 How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Providing the core service (bookings, mechanic matching, tracking) | Contract performance |
| Authentication and account security | Contract performance |
| Processing payments via Relworx | Contract performance |
| Sending booking confirmations and status push notifications | Legitimate interest / consent |
| Customer support and dispute resolution | Legitimate interest |
| App stability monitoring (crash analytics) | Legitimate interest |
| Legal compliance (financial records) | Legal obligation |
We do not sell your personal information to third parties. We do not use your data for advertising profiling.
5 Android Permissions Explained
| Permission | Why We Need It |
|---|---|
INTERNET | Required for all network communication with our servers and Firebase |
ACCESS_FINE_LOCATION | Precise GPS position for mechanic map, booking location, live tracking |
ACCESS_COARSE_LOCATION | Fallback approximate location when GPS is unavailable |
POST_NOTIFICATIONS | Booking status updates, mechanic arrival alerts, chat messages (Android 13+) |
All permissions except INTERNET are requested at runtime.
You may deny or revoke any permission; the app will continue to work with reduced functionality.
6 Data Retention
Account data
Retained while your account is active. Deleted within 30 days of an account deletion request.
Booking and payment records
Retained for 7 years to meet Ugandan financial record-keeping requirements.
Chat messages
Retained for 12 months, then automatically deleted.
Location data
Not persistently stored. Used in real-time and discarded once a booking session ends.
Crash logs
Retained by Firebase for 90 days.
7 Your Rights
Access
Request a copy of the personal data we hold about you
Correction
Correct inaccurate information in your profile
Deletion
Request deletion of your account and personal data (subject to legal retention obligations)
Portability
Receive your data in a structured, machine-readable format
Withdraw consent
Revoke location or notification permissions at any time via device settings
Object
Object to processing based on legitimate interest
To exercise any right, contact us at . We will respond within 30 days.
8 Data Security
All data in transit is encrypted using TLS 1.2 or higher. Data at rest is stored in Google Cloud Firestore, which encrypts data at rest by default. Access to production data is restricted to authorized personnel only. Payment transactions are processed over encrypted channels by Relworx and are never stored in plaintext on our servers.
No system is 100% secure. If you believe your account has been compromised, contact us immediately at .
9 Children's Privacy
Mobile Makanika is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will delete it promptly. If you believe a child has registered, contact us at .
10 International Data Transfers
Our primary data infrastructure is provided by Google Firebase (Google Cloud Platform). Data may be stored and processed in data centres outside Uganda, including in the European Union or the United States. Google applies standard contractual clauses and other appropriate safeguards for international transfers as described in their privacy documentation.
11 Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page. For material changes, we will notify you via a push notification or in-app banner. Continued use of the app after the effective date constitutes acceptance of the updated policy.
12 Contact Us
Questions, concerns, or requests about this Privacy Policy or your personal data — reach us directly: