Privacy policy
Last updated: 23 October 2026
This policy explains how Biz-Comply Uganda ("Biz-Comply", "we") handles personal data when you use the Biz-Comply app and website. We follow Uganda's Data Protection and Privacy Act, 2019 and its regulations.
Who we are
Biz-Comply Uganda, Kampala, Uganda. Contact: privacy@bizcomply.ug. For the business records a shop keeps in Biz-Comply, the business owner decides how they are used and we process them on the owner's behalf. For account and security data, we are responsible.
What we collect
| Data | Why |
|---|---|
| Name, mobile number, optional email | To create your account, sign you in and send SMS codes |
| Password or PIN (stored only as a secure hash) | To protect your account |
| Business details: name, TIN, location, tax registration, phone | To set up the business, apply the right tax treatment and print receipts |
| Sales, receipts, payments, products, stock | To provide the service, reports and receipts the business needs |
| Customer's mobile-money number (when they pay that way), optional customer name or TIN | To send the payment request and record the sale |
| Device identifier, app version, IP address, security logs | To keep accounts secure and investigate problems |
We do not collect your location, contacts, photos or files. Bluetooth is used only to connect to your receipt printer.
Who we share it with
- MTN Mobile Money and Airtel Money: payment details needed to collect a payment into the business's own merchant account.
- SMS provider (EgoSMS, operated by Pahappa Limited, Uganda): your number and the message, to deliver codes and notices.
- Uganda Revenue Authority (EFRIS): sale details for fiscal receipts, only when the business has enrolled and authorised this.
- Hosting and backup providers that store data for us under contract.
- Authorities, when the law requires it.
We do not sell personal data or use it for advertising.
How we protect it
Encryption in transit (HTTPS) and on the phone, separation of each business's data, encrypted storage of mobile-money credentials, access controls, audit logs and encrypted backups.
How long we keep it
Account data is kept while your account is open and deleted within 30 days of a deletion request. Business sales and tax records are kept for as long as Ugandan tax law requires businesses to keep them. Security logs are kept for up to 12 months.
Your rights
You can ask to access, correct or delete your personal data, object to processing, or withdraw consent. Write to privacy@bizcomply.ug, or use Delete your account. You can also complain to the Personal Data Protection Office (PDPO), Uganda.
Children
Biz-Comply is for businesses and is not intended for anyone under 18.
Changes
We will post any changes here and tell you in the app if they are significant.