Privacy Policy

1. INTRODUCTION AND SCOPE

• 1.1. Overview: GOAIDME LIMITED (“Goaidme,” “we,” “us,” or “our”) operates as a registered data controller and processor under the oversight of the Personal Data Protection Office (PDPO) within the National Information Technology Authority - Uganda (NITA-U). This Privacy Policy (“Policy”) explains our practices regarding the information we collect from Users, Organizers, Donors, and Beneficiaries.
• 1.2. Binding Nature: By accessing the Goaidme platform, creating a fundraiser, or making a donation, you acknowledge that you have read and understood this Policy. This document is a supplement to our Master Terms of Service and is incorporated therein by reference.
• 1.3. Global Applicability: While Goaidme is a Ugandan entity, we provide services globally. We have aligned this policy with the Data Protection and Privacy Act (2019) of Uganda, while also maintaining high standards for international users.

2. THE PUBLIC NATURE OF CROWDFUNDING

• 2.1. Direct Disclosure: Goaidme is a public-facing platform. Information you submit to be posted on a fundraiser page—including your name, image, video, and personal story—is visible to any visitor to the site.
• 2.2. Search Engine Indexing: Please be aware that public fundraisers and profiles are indexed by search engines (e.g., Google, Bing). Once information is made public, Goaidme cannot control its spread or usage by third parties.
• 2.3. Donor Visibility: By default, your name and donation amount appear on the public activity feed of a fundraiser. While we offer an "Anonymous" donation option, your identity remains visible to the Organizer, the Beneficiary, and Goaidme’s internal administrative team.

3. CATEGORIES OF INFORMATION WE COLLECT

We collect information through three primary channels: Direct Provision, Automatic Collection, and Third-Party Sources.

3.1. Information Provided Directly by You:

• Account Registration Data: Full legal name, email address, phone number, and password.
• KYC and Identity Verification Data: High-resolution scans of your National ID (NIN), Passport, Driving License, or Trading License. This data is mandatory for all Organizers under the Anti-Money Laundering Act (2013).
• Financial and Payout Information: Bank account details or Mobile Money numbers required for disbursements via Yo! Payments or Flutterwave.
• Campaign Content: Biographies, medical reports (where applicable), photos, and videos used to describe the fundraiser.
• Communications: Transcripts of chats with our support team, including interactions with AI-powered assistants or chatbots.

3.2. Information Automatically Collected:

• Technical Metadata: IP addresses, browser types, device identifiers, and operating system versions.
• Location Data: Imprecise location (City/Postcode) derived from your IP address to suggest local fundraisers.
• Usage Analytics: Information on how you navigate the site, including click-streams, time spent on pages, and referring URLs.

3.3. Information from Third-Party Sources:

• Payment Processors: Transaction status and partial payment details from Flutterwave and Yo! Payments.
• Social Media Integrations: If you log in via Google or Meta, we receive data permitted by your privacy settings on those platforms (e.g., your profile picture and email).

4. OUR USE OF COLLECTED INFORMATION

GOAIDME LIMITED utilizes your data for the following specific purposes:

• 4.1. Provision of Services: To create and maintain your profile, verify your identity (KYC), and facilitate the movement of funds from Donors to Beneficiaries.
• 4.2. Verification and Security: To detect and prevent fraud, money laundering, and unauthorized access. This includes cross-referencing your ID documents with government databases where legally permitted.
• 4.3. Currency Conversion Analysis: To calculate and display real-time exchange rates for cross-border donations.
• 4.4. Platform Optimization: To train our internal machine-learning models for better fraud detection and more personalized fundraiser recommendations.
• 4.5. Legal Compliance: To satisfy the reporting requirements of the Financial Intelligence Authority (FIA) and the Uganda Revenue Authority (URA).

5. DATA DISCLOSURE AND SHARING

We do not sell your personal data to third-party marketers. We only disclose information in the following circumstances:

• 5.1. With Payment Processors: Your financial data is shared with Flutterwave and Yo! Payments to process donations and disbursements.
• 5.2. Between Users: We share Donor names and email addresses with Organizers and Beneficiaries so they can provide updates or thank-you messages.
• 5.3. For Legal Necessity: We will disclose information to the Uganda Police Force, the National Drug Authority (NDA), or the FIA if we have a good-faith belief that such disclosure is necessary to comply with a warrant or prevent imminent harm.
• 5.4. For Platform Publicity: With your consent (granted upon starting a campaign), we may share your success stories, images, and fundraiser details with media outlets or on our own marketing channels.

6. DATA RETENTION AND STORAGE

• 6.1. Mandatory Retention: In accordance with Ugandan financial and tax laws, we retain transaction records and KYC documents for a minimum period of seven (7) years after the conclusion of a campaign or the closing of an account.
• 6.2. Electronic Storage: All data is stored in secure, encrypted servers. We utilize industry-standard Transport Layer Security (TLS) to encrypt data during transit.
• 6.3. Deletion Requests: You may request the deletion of your account; however, we will retain certain data required for legal compliance and auditing purposes.

7. YOUR PRIVACY RIGHTS (UGANDA DATA ACT 2019)

As a user of a PDPO-registered platform, you have the following rights under the Data Protection and Privacy Act (2019):

• Right to Access: You may request a copy of all personal data we hold about you.
• Right to Rectification: You may correct any inaccurate or incomplete information in your profile.
• Right to Erasure: You may request that we delete your data (subject to legal retention requirements).
• Right to Object: You may object to the processing of your data for direct marketing purposes.
• Right to Complain: You have the right to lodge a formal complaint with the Personal Data Protection Office (PDPO) if you believe GOAIDME LIMITED has mishandled your information.

8. CHILDREN’S PRIVACY

• 8.1. 18+ Restriction: Goaidme is not intended for use by persons under 18. We do not knowingly collect data from minors.
• 8.2. Guardian Consent: If a campaign is created for a minor, the data of that minor (name/photo) is provided by the parent or legal guardian. The guardian represents that they have the legal authority to share this information for the purpose of the fundraiser.

9. COOKIES AND TRACKING TECHNOLOGIES

We use cookies to improve your experience. These include:

• Essential Cookies: Required for logging in and secure payment processing.
• Analytics Cookies: To help us understand how many users are visiting each campaign.
• Marketing Cookies: To track the effectiveness of our social media advertisements.

10. CROSS-BORDER DATA TRANSFERS

As Goaidme uses international payment gateways like Flutterwave, your data may be processed in servers located outside of Uganda. By using the platform, you consent to these cross-border transfers, which are conducted under strict security protocols to ensure your data remains protected.

11. CHANGES TO THIS PRIVACY POLICY

GOAIDME LIMITED reserves the right to update this Policy. We will notify users of any material changes by updating the "Last Updated" date at the top of this document or by sending an email notification to registered users.

12. CONTACT INFORMATION

For any privacy-related inquiries, data access requests, or to report a data breach, please contact our Data Protection Officer (DPO):