Skip to content

Privacy Policy

Last updated: 2025-11-06

Kila Kitu respects your privacy. This policy explains how we collect, use, disclose, and protect personal data in accordance with Rwanda’s Personal Data Protection and Privacy Law, Law No. 058/2021 of 13/10/2021 (the “Rwanda PDPL”).

Data we collect

  • Account data: name, email address, phone number.
  • Operations data: trip, delivery and order details, timestamps, and status.
  • Device/usage data: app version, device identifiers, IP address, browser information.
  • Location data: where necessary for providing rides and deliveries (with consent or as permitted by law).
  • Support data: messages and attachments you send to our support channels.

How we use personal data

  • Provide and improve our services (dispatch, routing, delivery, support).
  • Safety, fraud prevention, and service integrity.
  • Customer support and communication about service updates.
  • Analytics and product development (aggregated or de‑identified where possible).
  • Legal compliance and enforcement of our Terms.

Lawful bases under Rwanda PDPL

We process personal data based on one or more lawful bases, including consent, performance of a contract, compliance with legal obligations, and legitimate interests (such as service improvement and security), balanced against your rights and expectations.

Sharing and transfers

We may share data with service providers under contract (e.g., analytics, cloud hosting, customer support). Where data is transferred outside Rwanda, we apply appropriate safeguards in line with the Rwanda PDPL, such as contractual protections and risk assessments.

Data retention

We retain personal data only as long as necessary for the purposes described above or as required by law. We apply criteria such as account status, legal requirements, and operational needs.

Your rights

Subject to the Rwanda PDPL, you may have rights to access, rectify, erase, restrict or object to processing, and portability. You may also withdraw consent where processing relies on consent. We will respond to valid requests within the timelines set by law.

Security

We use technical and organizational measures to protect personal data, including access controls, encryption in transit, and monitoring. No system is perfectly secure; we work continuously to improve our safeguards.

Contact

For questions or to exercise your rights, contact us atinfo@kilakitu.life.

This policy is for general information and does not constitute legal advice. If there is any conflict between this policy and applicable law, the law prevails.