Privacy Policy

When you use Dukan, we may collect:

• Account information: Phone number, display name, and profile details you provide during registration.
• Transaction data: Purchase history, escrow records, wallet activity, and payment information.
• Device information: Device type, operating system, browser, IP address, and mobile network information.
• Usage data: Pages visited, search queries, listing views, and interaction patterns.
• Verification documents: National ID, business licenses, or other documents submitted for account verification.

We use your information to:

• Provide, maintain, and improve the Dukan marketplace.
• Process transactions and manage escrow payments securely.
• Verify your identity and prevent fraud.
• Calculate and maintain trust scores to ensure marketplace safety.
• Send transaction notifications, security alerts, and service updates.
• Personalize your experience with relevant listings and recommendations.
• Comply with legal obligations under Ugandan law.

We do not sell your personal data. We may share information with:

• Transaction counterparties: Buyers and sellers see limited profile information necessary to complete a transaction.
• Payment providers: Mobile money operators (MTN, Airtel) to process payments.
• Delivery partners: Name, phone, and address for order fulfillment.
• Law enforcement: When required by Ugandan law or to protect the safety of our users.

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission (TLS/SSL).
• Hashed passwords — we never store plaintext credentials.
• Secure escrow fund management with audit trails.
• Rate limiting and abuse detection on all sensitive endpoints.
• Regular security audits and vulnerability assessments.

We retain your account data for as long as your account is active. Transaction records are retained for 7 years as required by Ugandan financial regulations. You may request deletion of your account data by contacting support, subject to legal retention requirements.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and associated data (subject to legal requirements).
• Withdraw consent for optional data processing at any time.
• Export your transaction history and account data.

To exercise these rights, contact us at privacy@dukan.ug.

We use cookies and browser local storage to maintain your session, remember preferences (such as recent searches), and analyze platform usage. You can manage cookie preferences through your browser settings.

Dukan is not intended for users under 18 years of age. We do not knowingly collect data from minors. If we learn that we have collected information from a child, we will delete it promptly.

We may update this Privacy Policy periodically. We will notify you of material changes through the Platform or via SMS. Your continued use after notification constitutes acceptance.

For privacy-related questions or concerns, contact our Data Protection Officer at privacy@dukan.ug.

Index Digital Limited · Kampala, Uganda