Privacy Policy
How AgroLink collects, uses and protects your personal information on our agricultural marketplace for farmers and buyers across Uganda and East Africa.
This policy is published in the Google Play store listing and inside the app, and it is consistent with the Data safety section we file in Play Console. It covers the Google Play User Data policy, including the Personal and Sensitive User Data, Prominent Disclosure & Consent, and Account Deletion requirements.
In short
- We collect only what's needed to run the AgroLink marketplace.
- We never sell your personal and sensitive user data to third parties.
- We do not link persistent device identifiers (IMEI, IMSI, SIM serial, MAC, Android ID) to your personal data or to any resettable identifier.
- We use modern cryptography (HTTPS / TLS) for all data in transit.
- You can access, update, or delete your account and data at any time — in-app and on our website.
- Questions? Email buzzspaceservicelimited@gmail.com or call +256 771963183.
1. Overview
AgroLink is an agricultural marketplace operated by Buzzspace Service Limited, a company registered in Kampala, Uganda. The platform connects farmers who want to sell produce with buyers who want to purchase it, in a low-data, mobile-first way.
This Privacy Policy explains what information we collect when you use the AgroLink mobile app or website, why we collect it, how we use it, who we share it with, and what rights you have over it. By creating an account or using the service, you agree to this policy.
2. Information we collect
2.1 Information you give us
- Account details — first name, last name, phone number, email, password (hashed), role (farmer or buyer).
- Farm or business profile — farm name, business name, district, region, country, profile photo.
- Listings — product title, description, quantity, unit, price, photos, availability, and the district where the produce is located.
- Inquiries and messages — content of the messages you send to other users through the platform.
- Verification documents — for farmers who choose to become verified sellers, we collect a payment reference, phone number used for payment, and a proof-of-payment image.
2.2 Information collected automatically
- Push notification token — a resettable token issued by Expo / your OS, used only to deliver alerts about new inquiries, replies and matches. Deleted when you sign out or delete your account.
- Approximate location — only if you grant location permission, used to show listings near you and calculate distances. You can turn this off in your device settings at any time.
- Usage data — listings you view, searches you run, and buttons you tap. This helps us surface better matches and fix broken features.
- Log data — IP address, app version, device model and crash reports, needed for security and stability.
2.3 Information we do NOT collect
- We do not collect your contacts, SMS or call logs.
- We do not collect precise background location when the app is closed.
- We do not read files on your device outside the photos you explicitly upload.
- We do not collect your government ID numbers.
- We do not collect your financial or payment card details — payments happen off-platform between users.
3. Device identifiers & permissions
We do not link persistent device identifiers to your data.
Consistent with Google Play's User Data policy, AgroLink does not collect or link any of the following to personal or sensitive user data, or to any resettable identifier:
- IMEI (International Mobile Equipment Identity)
- IMSI (International Mobile Subscriber Identity)
- SIM serial number
- MAC address or hardware serial numbers
- Android ID or other persistent hardware identifiers
3.1 Advertising ID and App Set ID
- We do not use the Android Advertising ID (AAID) for ads personalization or ads measurement.
- We do not use the App Set ID for ads personalization or ads measurement.
- We do not connect the App Set ID to any Android identifier or to any personal and sensitive user data for advertising purposes.
- If we ever begin using either ID, we will (a) restrict it to analytics or fraud prevention, (b) disclose it here, and (c) update the Data safety section before release.
3.2 Permissions we request and why
| Permission | Purpose | Optional? |
|---|---|---|
| POST_NOTIFICATIONS | Deliver alerts about inquiries, replies and matches. | Optional |
| ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION | Show listings near you and calculate distances. Never runs in the background. | Optional |
| CAMERA / READ_MEDIA_IMAGES | Upload listing photos and proof-of-payment images you choose to attach. | Optional |
| INTERNET | Core app functionality. | Required |
We use runtime permission prompts for every dangerous permission, and we ask only at the moment the feature is used. You can revoke any permission at any time from your device settings; the rest of the app continues to work.
4. How we use your information
We use your information only for the following purposes, and only when we have a valid reason to do so:
Run the marketplace
Create your account, publish listings, deliver inquiries between buyers and farmers.
Send notifications
Alert you when someone inquires about your listing, replies to a thread, or a new match for your saved search appears.
Verify farmers
Review your submitted proof of payment to grant the verified badge.
Improve the app
Understand which features are used and where users get stuck.
Prevent fraud
Detect spam, scams, fake listings and account takeovers.
Comply with the law
Meet legal, tax and regulatory requirements in Uganda.
6. Third-party SDKs in our app
Google Play holds developers responsible for every SDK integrated into their app. We therefore:
- Ensure that every SDK we include does not sell personal and sensitive user data collected from our app.
- Ensure that every SDK we include does not link persistent device identifiers (IMEI, IMSI, SIM serial) to personal data or to resettable identifiers.
- Require that any SDK collecting personal and sensitive user data by default is covered by the prominent in-app disclosure and consent described in section 12.
- Review each SDK's data practices before integrating it, and re-audit them periodically — for example via the Play SDK Index.
- Remove any SDK we cannot configure to comply with this policy.
If Google Play asks us to demonstrate compliance with the Prominent Disclosure and Consent requirements for an SDK, we will provide the required evidence within the timeframe they set.
7. How we protect your data
- Passwords are stored using industry-standard one-way hashing — never in plain text.
- All traffic between the app and our servers is encrypted in transit using modern cryptography (HTTPS / TLS).
- Access to production databases is restricted to a small number of engineers and audited.
- Uploaded images are processed and served from a hardened storage layer.
- We monitor for unusual activity and can lock compromised accounts quickly.
No system is 100% secure. If we ever discover a breach affecting your personal data, we will notify you and the relevant authorities as required by law.
8. How long we keep your data
| Data | Retention |
|---|---|
| Account & profile | While your account is active, then deleted within 30 days of an account-deletion request. |
| Listings & photos | Deleted within 30 days of an account-deletion request. |
| Messages & inquiries | Deleted within 30 days of an account-deletion request. |
| Push token | Deleted when you sign out or delete your account. |
| Financial & tax records | Up to 7 years, where required by Ugandan law. |
| Fraud-prevention logs | Up to 24 months, then anonymised. |
9. Account & data deletion
Because AgroLink lets you create an account, Google Play requires us to give you a way to delete it — both inside the app and on a public web page. We comply fully.
Profile → Account → Delete account
Available from the Profile screen once signed in. Confirmation is required.
https://communitybuzzspace.com/delete-account
This URL is also entered in the Play Console account-deletion field.
9.1 What is deleted
- Your name, phone number, email and hashed password.
- Your farm or business profile and profile photo.
- Your listings and uploaded listing photos.
- Your inquiries and messages.
- Your push-notification token.
- Your saved searches and usage data tied to your account.
9.2 What we may keep, and why
A small amount of data may be retained after deletion where the law requires it — for example, financial and tax records (up to 7 years) and fraud-prevention logs (up to 24 months). Retained data is stored securely and used only for those purposes. It is never sold or reused for advertising.
9.3 Timing
We acknowledge deletion requests within 7 days and complete deletion within 30 days. Deactivation, disabling or "freezing" an account is not a substitute for deletion, and we do not treat it as one.
9.4 If you can't access your account
Email buzzspaceservicelimited@gmail.com from the address linked to your account, or call +256 771963183. We will verify your identity and complete the deletion.
10. Your rights
Under the Uganda Data Protection and Privacy Act, 2019 and similar laws, you have the right to:
Access
Ask us for a copy of the personal data we hold about you.
Correct
Update your profile in the app, or ask us to fix inaccurate data.
Delete
Close your account and request deletion of your personal data.
Object
Object to certain processing, including marketing messages.
Restrict
Ask us to limit how we use your data while a dispute is resolved.
Portability
Receive your data in a common, machine-readable format.
Withdraw consent
Withdraw any consent you have given us, at any time.
Complain
File a complaint with the Personal Data Protection Office of Uganda.
To exercise any of these rights, email buzzspaceservicelimited@gmail.com or call +256 771963183. We respond within 30 days.
11. Google Play Data safety
Every app on Google Play must publish a clear, accurate Data safety section in the Play Console. We keep ours up to date, and it matches this Privacy Policy.
| Data collected | Name, email, phone, district/address, photos, app activity, device or other IDs (push token), approximate location (optional). |
| Data shared | Only with service providers (hosting, push notifications, analytics) under contract. |
| Data sold | No. |
| Data encrypted in transit | Yes — HTTPS / TLS. |
| Deletion mechanism | Available in-app and at https://communitybuzzspace.com/delete-account. |
| Committed to Play Families policy | Yes — the app is 18+ and not directed at children. |
If you believe any entry in the Data safety section is inaccurate, tell us at buzzspaceservicelimited@gmail.com and we will correct it.
12. Prominent disclosure & consent
Where our app accesses, collects, uses or shares personal and sensitive user data in a way that may not be within your reasonable expectation — for example, if any data collection were to occur in the background — we provide:
- Prominent, in-app disclosure — shown in the normal usage of the app, not buried in menus or settings, describing the data being accessed, why, and with whom it is shared. The disclosure is not placed only in this Privacy Policy or our Terms.
- Affirmative consent — requested through a clear, unambiguous dialog that requires a tap or checkbox. Dismissing or navigating away is never treated as consent.
- No auto-dismissing or expiring messages as a means of obtaining consent.
- Consent before collection — we ask before any personal and sensitive data is read by the app.
- Runtime permissions — the Android permission prompt always follows the disclosure for that feature.
If your app relies on another legal basis (for example, legitimate interest under the EU GDPR), we still provide the same in-app disclosures, because Google Play requires them regardless of the legal basis.
13. EU, UK and Swiss data
If we ever access, use or process personal information that originated in the European Economic Area, the United Kingdom, or Switzerland, we will:
- Comply with all applicable privacy, data-security and data-protection laws.
- Process that information only for purposes consistent with the consent you gave.
- Apply appropriate organisational and technical measures to protect it.
- Provide the level of protection required by the applicable transfer mechanism.
If we ever cannot meet those conditions, we will notify data-protection-office@google.com immediately and stop processing (or restore an adequate level of protection) without delay.
15. Children's privacy
AgroLink is intended for users aged 18 and over. We do not knowingly collect personal data from children, and we do not include any SDK that is not approved for child-directed services. If you believe a child has created an account, please contact us and we will delete it promptly.
16. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll change the "last updated" date at the top of this page and, if the changes are significant, notify you in the app. We will also keep the Data safety section in Play Console in sync. Continuing to use AgroLink after an update means you accept the new policy.
17. Contact us
For any question about this policy, your data, or to exercise your rights:
- Data controller
- Buzzspace Service Limited
- Address
- Kampala, Uganda
- Privacy point of contact
- Data Protection Contact
- Phone
- +256 771963183
- Account deletion
- https://communitybuzzspace.com/delete-account