Privacy Policy

This Privacy Policy explains how personal data is collected, used, shared, and protected when you use Tambla UG (Android / iOS) and related CVT membership services. Tambla UG is a CVT product. It is not a separate data controller.

Primary legal framework: Uganda’s Data Protection and Privacy Act, 2019. Where EU GDPR / UK GDPR applies, corresponding rights and bases also apply. This notice is not legal advice.

1. Who we are

Connected Verification Digital Uganda Limited (certificate of incorporation 80040634389004), trading as CVT, operates the Connected Verification Terminal — verification, Trust Profile, and related tools for commercial transport and member services in Uganda. Tambla UG is CVT’s rider app for registration, activation, hail / Connect, and related member services.

• Public site: www.cvt.co.ug
• Lab site: jasilab.net
• Android package: net.jasilab.cvt.tambla

2. Agreement when you sign up

By creating a Tambla account or submitting a Tambla application, you agree that CVT may build and maintain a member profile about you (including identity, contact, vehicle/affiliation, documents you upload, location used for hail matching, and service activity) so we can verify you, operate hail, communicate with you, improve trust and safety, and support CVT membership services.

3. What Tambla processes

4. How we use personal data

• Verify identity and operate Tambla registration / activation
• Provide hail / Connect matching and operational communications
• Build and maintain your CVT / Tambla member Trust Profile
• Secure the service (fraud prevention, access control, incident response)
• Meet legal obligations and respond to lawful requests
• Improve CVT products using limited operational analytics

5. Partner sharing (with your consent)

CVT does not sell your personal data.

We may share relevant profile and service information with authorised CVT partners (for example fleet operators, finance, device, insurance, or other rider-service partners) only where:

• (a) needed to provide a service you requested in Tambla or another CVT product; and/or
• (b) you give consent for that partner use (including through in-app partner offers or consent flows when those features go live).

Partners decide their own products (for example loan approval). CVT connects and verifies; partners remain responsible for their own decisions.

6. Other CVT products

As a Tambla / CVT member, your profile may also be used — with appropriate safeguards and, where required, your consent — to offer or process other CVT products and partner services for you (for example Trust Passport, partner offers, or future member benefits).

7. Subprocessors

We use carefully selected providers under our instructions, which may include hosting, database/auth, email, messaging (for example WhatsApp OTP), maps, and push notification infrastructure. Material providers used across CVT include services such as Vercel/Cloudflare hosting paths, Supabase, Resend, and Meta/WhatsApp where Connect messaging is enabled.

8. Retention

We keep data only as long as needed for verification, accountability, disputes, security, and legal obligations. Audit and trust decisions are typically retained for years. Verification documents follow a multi-year dispute/audit window after verification, with shorter clocks for abandoned drafts. Deletion or correction requests: privacy@cvt.ug.

9. Your rights and controls

• Access, correction, deletion (where the law allows), restriction/objection
• Withdraw consent where processing is consent-based
• Phone Settings: location, notifications, battery restrictions for hail features
• Complain to Uganda’s Personal Data Protection Office (PDPO) where applicable

To request deletion of some or all data while keeping your account, use jasilab.net/tambla/delete-data. To delete your Tambla account and associated data, use jasilab.net/tambla/delete-account or email privacy@cvt.ug. For trust standing disputes, email ops@cvt.ug with your verification ID.

10. Children

Tambla UG is directed at adults operating as commercial transport riders. We do not knowingly enrol children. Contact privacy@cvt.ug if you believe a child’s data was submitted in error.

11. Changes

We may update this policy as Tambla and CVT expand. The “Last updated” date will change, and material updates may also be notified in the app or by message where appropriate.

12. Related CVT policy

Broader CVT platform practices (registry, Trust Profile, enterprise tools) are described at www.cvt.co.ug/en/support/privacy. If there is a conflict about Tambla app processing, this Tambla page and your in-app notices apply for the mobile product; CVT remains the controller.