Privacy Updated January 15, 2026

Privacy Policy

How AgroLink collects, uses and protects your personal information on our agricultural marketplace for farmers and buyers across Uganda and East Africa.

This policy is published in the Google Play store listing and inside the app, and it is consistent with the Data safety section we file in Play Console. It covers the Google Play User Data policy, including the Personal and Sensitive User Data, Prominent Disclosure & Consent, and Account Deletion requirements.

In short

  • We collect only what's needed to run the AgroLink marketplace.
  • We never sell your personal and sensitive user data to third parties.
  • We do not link persistent device identifiers (IMEI, IMSI, SIM serial, MAC, Android ID) to your personal data or to any resettable identifier.
  • We use modern cryptography (HTTPS / TLS) for all data in transit.
  • You can access, update, or delete your account and data at any time — in-app and on our website.
  • Questions? Email buzzspaceservicelimited@gmail.com or call +256 771963183.

1. Overview

AgroLink is an agricultural marketplace operated by Buzzspace Service Limited, a company registered in Kampala, Uganda. The platform connects farmers who want to sell produce with buyers who want to purchase it, in a low-data, mobile-first way.

This Privacy Policy explains what information we collect when you use the AgroLink mobile app or website, why we collect it, how we use it, who we share it with, and what rights you have over it. By creating an account or using the service, you agree to this policy.

Data controller: Buzzspace Service Limited, Kampala, Uganda. Privacy point of contact: Data Protection Contact — email buzzspaceservicelimited@gmail.com or call +256 771963183.

2. Information we collect

2.1 Information you give us

  • Account details — first name, last name, phone number, email, password (hashed), role (farmer or buyer).
  • Farm or business profile — farm name, business name, district, region, country, profile photo.
  • Listings — product title, description, quantity, unit, price, photos, availability, and the district where the produce is located.
  • Inquiries and messages — content of the messages you send to other users through the platform.
  • Verification documents — for farmers who choose to become verified sellers, we collect a payment reference, phone number used for payment, and a proof-of-payment image.

2.2 Information collected automatically

  • Push notification token — a resettable token issued by Expo / your OS, used only to deliver alerts about new inquiries, replies and matches. Deleted when you sign out or delete your account.
  • Approximate location — only if you grant location permission, used to show listings near you and calculate distances. You can turn this off in your device settings at any time.
  • Usage data — listings you view, searches you run, and buttons you tap. This helps us surface better matches and fix broken features.
  • Log data — IP address, app version, device model and crash reports, needed for security and stability.

2.3 Information we do NOT collect

  • We do not collect your contacts, SMS or call logs.
  • We do not collect precise background location when the app is closed.
  • We do not read files on your device outside the photos you explicitly upload.
  • We do not collect your government ID numbers.
  • We do not collect your financial or payment card details — payments happen off-platform between users.

3. Device identifiers & permissions

We do not link persistent device identifiers to your data.

Consistent with Google Play's User Data policy, AgroLink does not collect or link any of the following to personal or sensitive user data, or to any resettable identifier:

  • IMEI (International Mobile Equipment Identity)
  • IMSI (International Mobile Subscriber Identity)
  • SIM serial number
  • MAC address or hardware serial numbers
  • Android ID or other persistent hardware identifiers

3.1 Advertising ID and App Set ID

  • We do not use the Android Advertising ID (AAID) for ads personalization or ads measurement.
  • We do not use the App Set ID for ads personalization or ads measurement.
  • We do not connect the App Set ID to any Android identifier or to any personal and sensitive user data for advertising purposes.
  • If we ever begin using either ID, we will (a) restrict it to analytics or fraud prevention, (b) disclose it here, and (c) update the Data safety section before release.

3.2 Permissions we request and why

Permission Purpose Optional?
POST_NOTIFICATIONS Deliver alerts about inquiries, replies and matches. Optional
ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION Show listings near you and calculate distances. Never runs in the background. Optional
CAMERA / READ_MEDIA_IMAGES Upload listing photos and proof-of-payment images you choose to attach. Optional
INTERNET Core app functionality. Required

We use runtime permission prompts for every dangerous permission, and we ask only at the moment the feature is used. You can revoke any permission at any time from your device settings; the rest of the app continues to work.

4. How we use your information

We use your information only for the following purposes, and only when we have a valid reason to do so:

Run the marketplace

Create your account, publish listings, deliver inquiries between buyers and farmers.

Send notifications

Alert you when someone inquires about your listing, replies to a thread, or a new match for your saved search appears.

Verify farmers

Review your submitted proof of payment to grant the verified badge.

Improve the app

Understand which features are used and where users get stuck.

Prevent fraud

Detect spam, scams, fake listings and account takeovers.

Comply with the law

Meet legal, tax and regulatory requirements in Uganda.

Legal bases. We rely on performance of a contract (to run your account and listings), legitimate interest (to prevent fraud and improve the app), and your consent (for location, notifications and marketing) under the Uganda Data Protection and Privacy Act, 2019, and — where it applies — the EU GDPR.

5. When we share your information

We do not sell your personal and sensitive user data. We share it only in the narrow cases below:

  • With other users. When you post a listing or send an inquiry, the other party sees your public profile (name, farm/business name, district, verified badge, profile photo) and the content you chose to share.
  • With service providers. We use trusted third parties for cloud hosting, push notifications (Expo), and analytics. They may only process your data on our instructions and under contract, and they may not sell it.
  • For legal reasons. If required by law, court order, or to protect the safety of our users, we may disclose data to the appropriate authorities.
  • In a business change. If Buzzspace Service Limited is acquired or merged, your data may transfer to the new entity. We'll notify you before that happens.

6. Third-party SDKs in our app

Google Play holds developers responsible for every SDK integrated into their app. We therefore:

  • Ensure that every SDK we include does not sell personal and sensitive user data collected from our app.
  • Ensure that every SDK we include does not link persistent device identifiers (IMEI, IMSI, SIM serial) to personal data or to resettable identifiers.
  • Require that any SDK collecting personal and sensitive user data by default is covered by the prominent in-app disclosure and consent described in section 12.
  • Review each SDK's data practices before integrating it, and re-audit them periodically — for example via the Play SDK Index.
  • Remove any SDK we cannot configure to comply with this policy.

If Google Play asks us to demonstrate compliance with the Prominent Disclosure and Consent requirements for an SDK, we will provide the required evidence within the timeframe they set.

7. How we protect your data

  • Passwords are stored using industry-standard one-way hashing — never in plain text.
  • All traffic between the app and our servers is encrypted in transit using modern cryptography (HTTPS / TLS).
  • Access to production databases is restricted to a small number of engineers and audited.
  • Uploaded images are processed and served from a hardened storage layer.
  • We monitor for unusual activity and can lock compromised accounts quickly.

No system is 100% secure. If we ever discover a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

8. How long we keep your data

Data Retention
Account & profileWhile your account is active, then deleted within 30 days of an account-deletion request.
Listings & photosDeleted within 30 days of an account-deletion request.
Messages & inquiriesDeleted within 30 days of an account-deletion request.
Push tokenDeleted when you sign out or delete your account.
Financial & tax recordsUp to 7 years, where required by Ugandan law.
Fraud-prevention logsUp to 24 months, then anonymised.

9. Account & data deletion

Because AgroLink lets you create an account, Google Play requires us to give you a way to delete it — both inside the app and on a public web page. We comply fully.

In the app

Profile → Account → Delete account

Available from the Profile screen once signed in. Confirmation is required.

On the web

https://communitybuzzspace.com/delete-account

This URL is also entered in the Play Console account-deletion field.

9.1 What is deleted

  • Your name, phone number, email and hashed password.
  • Your farm or business profile and profile photo.
  • Your listings and uploaded listing photos.
  • Your inquiries and messages.
  • Your push-notification token.
  • Your saved searches and usage data tied to your account.

9.2 What we may keep, and why

A small amount of data may be retained after deletion where the law requires it — for example, financial and tax records (up to 7 years) and fraud-prevention logs (up to 24 months). Retained data is stored securely and used only for those purposes. It is never sold or reused for advertising.

9.3 Timing

We acknowledge deletion requests within 7 days and complete deletion within 30 days. Deactivation, disabling or "freezing" an account is not a substitute for deletion, and we do not treat it as one.

9.4 If you can't access your account

Email buzzspaceservicelimited@gmail.com from the address linked to your account, or call +256 771963183. We will verify your identity and complete the deletion.

10. Your rights

Under the Uganda Data Protection and Privacy Act, 2019 and similar laws, you have the right to:

Access

Ask us for a copy of the personal data we hold about you.

Correct

Update your profile in the app, or ask us to fix inaccurate data.

Delete

Close your account and request deletion of your personal data.

Object

Object to certain processing, including marketing messages.

Restrict

Ask us to limit how we use your data while a dispute is resolved.

Portability

Receive your data in a common, machine-readable format.

Withdraw consent

Withdraw any consent you have given us, at any time.

Complain

File a complaint with the Personal Data Protection Office of Uganda.

To exercise any of these rights, email buzzspaceservicelimited@gmail.com or call +256 771963183. We respond within 30 days.

11. Google Play Data safety

Every app on Google Play must publish a clear, accurate Data safety section in the Play Console. We keep ours up to date, and it matches this Privacy Policy.

Data collectedName, email, phone, district/address, photos, app activity, device or other IDs (push token), approximate location (optional).
Data sharedOnly with service providers (hosting, push notifications, analytics) under contract.
Data soldNo.
Data encrypted in transitYes — HTTPS / TLS.
Deletion mechanismAvailable in-app and at https://communitybuzzspace.com/delete-account.
Committed to Play Families policyYes — the app is 18+ and not directed at children.

If you believe any entry in the Data safety section is inaccurate, tell us at buzzspaceservicelimited@gmail.com and we will correct it.

12. Prominent disclosure & consent

Where our app accesses, collects, uses or shares personal and sensitive user data in a way that may not be within your reasonable expectation — for example, if any data collection were to occur in the background — we provide:

  • Prominent, in-app disclosure — shown in the normal usage of the app, not buried in menus or settings, describing the data being accessed, why, and with whom it is shared. The disclosure is not placed only in this Privacy Policy or our Terms.
  • Affirmative consent — requested through a clear, unambiguous dialog that requires a tap or checkbox. Dismissing or navigating away is never treated as consent.
  • No auto-dismissing or expiring messages as a means of obtaining consent.
  • Consent before collection — we ask before any personal and sensitive data is read by the app.
  • Runtime permissions — the Android permission prompt always follows the disclosure for that feature.

If your app relies on another legal basis (for example, legitimate interest under the EU GDPR), we still provide the same in-app disclosures, because Google Play requires them regardless of the legal basis.

13. EU, UK and Swiss data

If we ever access, use or process personal information that originated in the European Economic Area, the United Kingdom, or Switzerland, we will:

  • Comply with all applicable privacy, data-security and data-protection laws.
  • Process that information only for purposes consistent with the consent you gave.
  • Apply appropriate organisational and technical measures to protect it.
  • Provide the level of protection required by the applicable transfer mechanism.

If we ever cannot meet those conditions, we will notify data-protection-office@google.com immediately and stop processing (or restore an adequate level of protection) without delay.

14. Cookies and similar technologies

The AgroLink website uses a small number of cookies to keep you signed in and remember your preferences. The mobile app uses secure storage on your device for the same purpose. We do not use third-party advertising cookies.

You can clear cookies at any time from your browser settings. Doing so will sign you out of the website but will not delete your account.

15. Children's privacy

AgroLink is intended for users aged 18 and over. We do not knowingly collect personal data from children, and we do not include any SDK that is not approved for child-directed services. If you believe a child has created an account, please contact us and we will delete it promptly.

16. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll change the "last updated" date at the top of this page and, if the changes are significant, notify you in the app. We will also keep the Data safety section in Play Console in sync. Continuing to use AgroLink after an update means you accept the new policy.

17. Contact us

For any question about this policy, your data, or to exercise your rights:

Data controller
Buzzspace Service Limited
Address
Kampala, Uganda
Privacy point of contact
Data Protection Contact