Privacy Policy
This explains what we collect, why, and what you can do about it. We are the data controller for the personal data described here, and we handle it under Uganda's Data Protection and Privacy Act 2019.
What we collect
Account details: your name, email address, telephone number, and a photograph if you upload one. Listing details a Landlord provides, including the property address, price, description and photographs. Verification documents - a national identity document and a Local Council chairman's letter - where a Landlord chooses to be verified. Payment details limited to the Mobile Money number used, the amount, the network and the outcome; we never see or store your Mobile Money PIN, and the number is masked wherever it is displayed or logged. Booking and enquiry records, and questions you ask the assistant. Technical information such as device type, app version and a signal about whether the device appears modified, used to detect fraud.
Location. If you allow it, the app reads your device's approximate or precise location only while you are using the app, to show homes near you on the map and to record that you arrived when you check in to a short stay. You can browse and book without sharing it, and you can switch location off at any time in your phone's settings. We do not collect your location in the background.
Camera and photos. If you allow it, the app uses your camera or photo library only so you can attach pictures of a property, your profile photo, or your verification documents. We do not access any other photos, and the app does not use your microphone.
Device identifiers. The app creates a random identifier for each installation so that your assistant conversation and rate limits stay with your own device, and a push-notification token so we can deliver notifications about your bookings. Neither is your advertising ID, IMEI or Android ID, and we do not use them to track you across other apps or websites.
Sign-in. If you sign in with Google or Apple, we receive your name and email address from them, and nothing else.
Why we use it
To operate the Platform: to publish Listings, connect Renters with Landlords, take posting fees and stay commission, verify Landlords, answer your questions, send you notifications about your own bookings, detect fraud and abuse, and meet our legal obligations. We do not use your personal data to make automated decisions that produce a legal effect on you.
Who sees it
A Landlord's telephone, WhatsApp and email are shown on their own Listings, because being contactable is the purpose of advertising. For short stays this is deliberately reversed: neither Guest nor Host is given the other's contact details, and Wolan calls the Host to confirm. Beyond that we share personal data only with service providers who process it on our instructions - payment, hosting, mapping, messaging and analytics providers - and where the law requires it. We do not sell your personal data and we do not share it for anyone else's advertising. Verification documents are stored apart from public content and are never published or shown to other Users. Some of our providers store data outside Uganda; where that happens we rely on contractual protections with those providers.
How long we keep it
For as long as your account is open, and afterwards only where we must. Deleting your account immediately removes your profile, photograph, verification documents, bookings, notifications and saved assistant conversations. Records of payments are kept because we are required to keep books of account, and security audit records showing that an account existed and was deleted are kept so that we can investigate incidents. An opt-out from marketing messages is kept indefinitely and on purpose - an opt-out that expired would quietly become consent again.
Your rights
You may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to a particular use. Most of this you can do yourself in your account settings. To delete your account, use the "Delete my account" button at the bottom of the Account tab in the app, or follow the steps on our public page at https://wolanrealestate.com/delete-account - that page also works if you can no longer sign in, and explains what is deleted and what is kept. For anything else, contact us and we will respond. If you believe we have mishandled your data you may complain to the Personal Data Protection Office.
How we protect it
Passwords are stored only as irreversible hashes and are never logged. Sessions expire. Verification documents sit outside the public content servers, every access to one is recorded, and secrets, identity numbers and telephone numbers are stripped from our logs automatically. No system is perfectly secure, and we will tell you and the regulator if a breach affects your data.
Children
The Platform is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
Contact
Wolan Real Estate. Telephone +256 761 253 001. Email customer@wolanrealestate.com. Mark data-protection enquiries clearly and they will be routed to the person responsible.