Privacy Policy

Last updated:

Plain-language summary: we collect what you send us over WhatsApp/Telegram (your messages, phone number, and any photos or voice notes you choose to share) so our AI can find you what you're looking for, and so a human can step in when the AI can't. We don't sell your data. Full details below.

1. Who we are

The City Plug ("we," "us," "our") operates an AI-assisted local discovery and matching service in Uganda, accessible via WhatsApp and Telegram. This policy explains what information we collect when you use our service, why we collect it, and what rights you have over it.

2. Information we collect

We collect information in these ways:

Messages you send us - text, photos, and voice notes you send while looking for something, listing a business, or responding to us.
Contact information - your phone number and the display name associated with your WhatsApp/Telegram account, since these platforms give us that automatically when you message us.
Usage information - which requests you've made, what you searched for, and how you interacted with results (e.g. which listing you asked to connect with), so we can improve matching and track whether the service is actually working for people.
Provider/business information - if you list something for sale or a service you offer, we collect what you tell us about it: title, description, price, location, photos, and your contact details, so buyers can find and reach you.
Payment information (providers only) - if you pay to boost a listing, we record the amount, payment method, and a payment reference (e.g. a Mobile Money transaction ID) you provide. We do not process card payments directly or store card numbers.

3. How we use your information

To understand what you're asking for and find matching listings, using AI (Google Gemini and/or Anthropic Claude, and/or OpenAI, depending on our current configuration) to interpret your messages.
To connect you with a business or buyer when you ask to be connected.
To follow up if our AI couldn't find or understand something - a real person on our team may review the request and, if needed, contact you directly on WhatsApp or Telegram to help.
To send you notifications you've asked for (e.g. "notify me when something matching comes up").
To measure and improve the service - which categories of request succeed, which don't, and where our AI is making mistakes.

4. AI processing and human review

Your messages, including photos and transcribed voice notes, are sent to third-party AI providers (Google, Anthropic, and/or OpenAI, depending on configuration) to interpret what you're asking for. These providers process your data under their own privacy terms as our data processors. When our AI can't confidently handle a request, it may be reviewed by a member of our human team, and in some cases forwarded directly to a designated team member on WhatsApp or Telegram so they can help you personally.

5. Sharing your information

We share information only in these situations:

With a provider/business, if you ask to be connected with them - we share what's needed to make that connection (typically your phone number and the substance of your request).
With a buyer, if you're a provider and someone asks to be connected with you.
With our AI processing providers (see §4), to interpret and respond to your messages.
With WhatsApp (Meta) and Telegram, as the messaging platforms carrying our conversation with you - subject to their own privacy policies.
If required by law, or to protect the safety of our users or the public.

We do not sell your personal information to third parties.

6. Data retention

We retain your conversation history and listing data for as long as your account is active, and for a reasonable period afterward to resolve disputes, maintain records, and improve our service. You can request deletion of your data at any time (see §8).

7. Data security

We take reasonable technical and organizational measures to protect your information, including encrypted connections, access controls on our admin systems, and two-factor authentication for our team. No system is completely secure, and we can't guarantee absolute security.

8. Your rights

Under Uganda's Data Protection and Privacy Act, 2019, and depending on where you're located, you may have the right to access, correct, or request deletion of your personal information, object to certain processing, or withdraw consent. To exercise any of these rights, message us on WhatsApp or Telegram and ask to speak with a human, or contact us using the details in §10.

9. Children

Our service is not directed at children, and we do not knowingly collect information from anyone under 18.

10. Contact us

Questions about this policy or your data can be sent to us directly through the WhatsApp or Telegram bot - just ask to speak with a human.

11. Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above when we do. Continued use of the service after a change means you accept the updated policy.

Note: This is a template privacy policy drafted for The City Plug's specific use case. It is not a substitute for legal advice - we'd recommend having it reviewed by a lawyer familiar with Uganda's Data Protection and Privacy Act, 2019 before relying on it for a live product.