Privacy Policy — KFR Lodge
KFR Lodge is the ordering app of Kampala Forest Resort, Tank Hill Road, Muyenga, Kampala, Uganda (“Kampala Forest Resort”, “we”, “us”). This policy explains what we collect when you browse our menu, order food, pay, and follow your order, why, who we share it with, and the choices you have. We handle personal data in line with Uganda’s Data Protection and Privacy Act, 2019.
What we collect
- Phone number — to sign you in with a one-time SMS code, and so the kitchen and rider can reach you about an order.
- Name, delivery area and address — what you give us so the right order reaches the right door.
- Orders — the dishes and choices, notes to the kitchen, totals, times, and the order’s progress.
- Payments — for mobile money orders: the MTN or Airtel number you pay from, the amounts, and the payment’s outcome. We never see or store your mobile money PIN. Cash orders record only that they are to be paid in cash.
- Notification address — if you allow notifications, a device token so we can send updates about your order.
- Your address’s map pin — only if you tap Pin where I am now when saving your delivery address: your phone’s precise location at that moment, saved with your address so a rider can navigate to you. It is not collected in the background or at any other time, and you can remove it from the address screen.
- Rider location — collected only from riders’ phones, only while they are carrying an order, so you can see it on its way.
- Technical data — basic device and diagnostic information our infrastructure provider (Google Firebase) collects to keep the app secure and working.
Browsing the menu needs no account. We ask for your number only when you place an order.
How we use it
- To take, prepare, deliver and charge for your orders.
- To show you your order’s progress and your past orders, and to let you reorder.
- To tell you when your order is paid, cooking, ready or on its way, if you allow notifications.
- To keep your account secure and the service working.
- To keep the sales and payment records the law requires.
We do not use your data for advertising, and we do not sell it.
Who we share it with
- Our kitchen staff and riders — your name, number, order and address, so it can be prepared and delivered.
- SafeBoda — when your order is delivered by a SafeBoda rider instead of one of ours (only orders paid by mobile money): your name, phone number, delivery address and map pin, and a short description of the order, so their rider can collect it from us and bring it to you. SafeBoda handles this under its own privacy policy.
- Clutch Technologies — which runs the delivery service that books SafeBoda for us (the Clutch Delivery Hub): the same delivery details, kept on our behalf and deleted with your account.
- KaCyber Pay, MTN and Airtel — for mobile money payments: your number, the amount and a reference, so the payment prompt reaches your phone.
- Google Firebase and Google Cloud — who host the app’s data and sign-in, and deliver notifications (with Apple’s Push Notification service on iPhone), on our behalf.
- Authorities, where the law requires it.
How long we keep it
Your account details stay until you delete your account. Order and payment records are kept as long as Ugandan tax and accounting law requires; when you delete your account, your name, number, address, map pin and notes are removed from them, including from our delivery service’s records.
Deleting your account
In the app, open Account and tap Delete account. Your sign-in, name and saved address are deleted, and your details are removed from past orders. If you can’t use the app, see how to ask us to delete it.
Your rights
You can ask to see the personal data we hold about you, to have it corrected, or to have it deleted, and you can object to how we use it. You can turn notifications off at any time in your phone’s settings. If you are unhappy with how we handle your data, you can complain to Uganda’s Personal Data Protection Office.
Security
Data is sent over encrypted connections and stored with Google Cloud. Only our staff, by role, can see orders, and only managers can see payment records.
Children
The app is not meant for children under 13, and we do not knowingly collect their data.
Changes
If we change this policy, we will update the date at the top and, for important changes, tell you in the app.