Privacy Policy

Last updated: July 2026 · Applies to all users of DukaFlyer (dukaflyer.com)

Plain-language summary: We collect the information needed to run your shop and connect you with buyers — your name, phone number, and shop details. We use Google Firebase to store this data and Anthropic's Claude AI to power Duka AI's chat. We don't sell your data. You can request access to or deletion of your data at any time.

1. Who This Policy Covers

This Privacy Policy explains how DukaFlyer ("we," "us") collects, uses, stores, and protects personal data belonging to Merchants (shop owners) and Buyers (people who browse shops and place orders) on dukaflyer.com. It should be read together with our Terms of Service.

2. Information We Collect

What	When	Why
Name, email, profile photo	When you sign in with Google	To create and identify your account
WhatsApp number	When you create a shop	So Buyers can contact you to place orders
Shop details (name, category, region, products, prices)	When you create or edit your shop	To display your shop on the marketplace
Chat messages with Duka AI	When you use the Duka AI chat widget	To generate responses and, if you choose, pre-fill your shop setup form
Basic usage data (pages visited, general location by IP)	Automatically, while browsing	To understand how DukaFlyer is used and improve it

We do not collect payment card details or process payments ourselves — orders are completed directly between Buyers and Merchants via WhatsApp.

3. How We Use Your Information

To create and operate your DukaFlyer account and shop;
To connect Buyers with Merchants for orders;
To power Duka AI's chat responses and shop-setup assistance;
To send you service-related communications (e.g. billing, account notices);
To maintain the security and integrity of the platform;
To improve DukaFlyer based on how it's actually used.

4. Third-Party Services We Use

DukaFlyer relies on the following third-party infrastructure providers to operate. Each processes certain data on our behalf:

4.1 Google Firebase

We use Firebase (a Google Cloud product) for account sign-in, database storage (Firestore), and file storage. This means your account and shop data is stored on Google's servers, which may be located outside Uganda.

4.2 Anthropic (Claude AI)

When you chat with Duka AI, your messages are sent to Anthropic's Claude API to generate a response. Anthropic processes this data to return an answer; it is not used by DukaFlyer to identify you personally beyond the conversation itself. Do not share sensitive personal information (e.g. national ID numbers, passwords, financial account details) in your Duka AI chat.

4.3 Google Sign-In

We use Google's authentication service so you can sign in without creating a separate password. We only receive the basic profile information Google shares (name, email, photo) — we do not receive your Google password.

5. Data Storage & International Transfer

Because we use Google Firebase and Anthropic's API, some of your data may be stored or processed on servers located outside Uganda. By using DukaFlyer, you consent to this transfer, which is necessary for us to provide the service. We take reasonable steps to ensure any third party we use maintains appropriate data protection standards.

6. Data Sharing

We do not sell your personal data. We share data only in these situations:

Your shop details and product listings are shown publicly to Buyers, since that is the purpose of creating a shop;
Your WhatsApp number is shown to Buyers who wish to place an order with you;
With the third-party service providers described in Section 4, solely to operate the platform;
If required by law, court order, or to protect the rights, safety, or property of DukaFlyer, our users, or the public.

7. Your Rights

Under Uganda's Data Protection and Privacy Act, 2019, you have the right to:

Request access to the personal data we hold about you;
Request correction of inaccurate data;
Request deletion of your data, subject to our legitimate business and legal record-keeping needs (e.g. transaction records we must keep for a period);
Withdraw consent for optional processing, where applicable.

To exercise any of these rights, contact us using the details in Section 10.

8. Data Retention

We retain your account and shop data for as long as your account is active. If you close your account, we may retain certain records (e.g. billing history) for a reasonable period afterward where required for legal, accounting, or legitimate business purposes, after which it is deleted or anonymized.

9. Security

We use industry-standard tools (including Firebase Authentication and Google Cloud infrastructure) to help protect your data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Contact

For questions about this Privacy Policy or to make a data request, contact us at: [INSERT SUPPORT EMAIL]

11. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of DukaFlyer after changes are posted constitutes acceptance of the updated policy. Material changes will be highlighted on this page.