Privacy Policy

TowerSMS (com.towersmsuganda.app)

Effective: October 1, 2026 Updated: October 1, 2026 Uganda DPA 2019 Compliant

This Privacy Policy explains how TowerSMS Uganda ("we", "us") collects, uses, and protects your personal data when you use TowerSMS mobile application with package name com.towersmsuganda.app. Data Controller: TowerSMS Uganda, Kampala, Uganda. Contact: care@ugapi.truekenya.com

1. Information We Collect

We collect only what is necessary to provide SMS services:

Account Data: Name, email, phone number, password (encrypted)
Content You Provide: SMS messages, templates, contact numbers you upload for sending
Automatic Data: Device ID, Android version, IP address, app crash logs, delivery receipts
Transaction Data: Payment confirmation from Google Play Billing (we do not store card numbers)

2. Legal Basis - Uganda Data Protection & Privacy Act, 2019

Consent - When you install and accept this policy
Contract - To deliver SMS services you purchased
Legal Obligation - To comply with UCC and NITA-U regulations
Legitimate Interest - Fraud prevention and security

3. How We Use Your Data

To create and manage your TowerSMS account
To route and deliver SMS through MTN, 【entity-Airtel¦canonical_name=Airtel】 and other partners
To show delivery reports and manage your balance
To provide customer support via care@ugapi.truekenya.com
To comply with Uganda Communications Commission (UCC) requirements

We DO NOT: Sell your data, read your personal inbox SMS, or access OTPs from other apps. We only process SMS sent through TowerSMS.

4. App Permissions (Required by Google Play)

Permission	Purpose
INTERNET	Connect to TowerSMS servers
READ_CONTACTS (Optional)	Only if you tap "Import Contacts". Never auto-uploaded.
SEND_SMS	To send SMS you create in the app
POST_NOTIFICATIONS	Delivery reports & low balance alerts

5. Data Sharing

We share data only with:

Telecom operators (【entity-MTN Uganda¦canonical_name=MTN Uganda】, 【entity-Airtel Uganda¦canonical_name=Airtel】) for SMS delivery
Secure cloud hosting providers
Law enforcement when required by Court Order under Ugandan law

6. Data Retention

Account data: While account is active
SMS logs: 90 days, then deleted/anonymized
Deleted accounts: Permanently deleted within 30 days
Financial records: 6 years as per Uganda law

7. Your Rights Under Uganda Law

Under Section 24 of the DPA 2019, you have the right to:

Access your data

Correct inaccurate data

Delete your account & data

Withdraw Consent anytime

To exercise rights, email care@ugapi.truekenya.com. We respond within 14 days.

8. Security

We use TLS 1.3 encryption, bcrypt password hashing, and AES-256 at rest as required by Section 29 of Uganda Data Protection Regulations.

9. Children

TowerSMS is for users 18+. We do not knowingly collect data from children.

10. Account Deletion

You can delete your account at any time:

In-App: Settings > Account > Delete Account
Email: Send request to care@ugapi.truekenya.com with subject "Delete My Account"

Deletion completed within 30 days. See our deletion page if you have a website hosted version.

11. Complaints

If not satisfied, you can complain to:

Personal Data Protection Office (PDPO) - NITA-U
dataprotection@nita.go.ug | www.nita.go.ug

App: com.towersmsuganda.app | Contact: care@ugapi.truekenya.com