Privacy policy

KaSmart is a waste collection and recycling rewards service run by APBC in Uganda. This policy explains what information KaSmart keeps about customers (households, businesses and institutions), Green Agents and staff, why, and what you can ask us to do with it. It covers the KaSmart and KaSmart Agent apps, SMS messages and the staff dashboard.

What we keep

• Account details: name, phone number, the type of account, address and the location of the premises on a map, entered by hub staff when you register.
• Collections: the date, waste type, weight and sorting quality of each collection, and the agent who recorded it.
• Points: points earned, corrected and redeemed.
• Subscriptions and payments: plans, amounts, dates and payment references. Card and mobile money details are entered on Pesapal’s page; KaSmart never sees them.
• Payouts: the mobile money number you ask us to pay, the amount and the transaction reference.
• Pickup requests and any note you add.
• Green Agents only: the phone’s location, while a shift is open. Tracking starts when the agent taps Start shift and stops at End shift.
• Devices: a notification token for each phone signed in to an app.
• Error reports: technical details when an app or the dashboard fails (the screen, the error and the phone model). They do not include your name, phone number or location.

Why we keep it

• To run the service: sign you in, record collections, work out points, take subscription payments and pay out redemptions.
• To send you SMS and app notifications about collections, payments, payouts, pickups and renewals.
• To send agents to nearby pickups (agent location during shifts).
• To keep accurate financial records, prevent fraud, and fix faults.
• To report on the programme, using totals that do not identify anyone.

We do not sell your information and do not use it for advertising.

Who else handles it

These service providers process information for us, only to provide their service:

• Supabase and Cloudflare: hosting, the database and file storage.
• Pesapal: subscription payments and payouts.
• Africa’s Talking: SMS sign-in codes and messages.
• Google Firebase: app notifications.

Some of these providers store data outside Uganda. We share information with authorities only when the law requires it.

How long we keep it

• Agent locations: deleted automatically after 90 days unless APBC sets a shorter period.
• Collections, points, payments and payouts: kept for as long as the law requires for financial records, even after an account is deleted. After deletion they are no longer linked to your phone number.
• Other account details: until the account is deleted.
• Encrypted backups: kept for a limited period and then deleted.

Your rights

Under the Data Protection and Privacy Act, 2019 you can ask to see the information we hold about you, have it corrected, object to how it is used, or have it deleted. You can delete your app account yourself; see Delete your account. For anything else, contact us below. You can also complain to the Personal Data Protection Office.

Security

Information is sent over encrypted connections. Staff see only the parts of the system their role allows, and changes to accounts, rates and payouts are recorded.

Children

KaSmart accounts are opened by adults for a household or organisation. We do not knowingly collect information from children.

Contact

• Your hub.
• APBC’s office.

Changes

If we change this policy we will update the date at the top and, for important changes, tell you by SMS.