1. Introduction
Riisa+ ("we", "us", "our") is a livestock intelligence platform operated jointly by
Ibabaza Media Ltd and NIWAJ TECH Uganda Ltd,
registered in Uganda. This Privacy Policy explains how we collect, use, share and protect
your personal information when you use the Riisa+ mobile application (Android and iOS),
web application, USSD service or any related services (collectively, the "Service").
By accessing or using the Service you agree to this Privacy Policy. If you do not agree,
please do not use the Service.
2. Information We Collect
2.1 Information you provide
- Account data — name, email address, phone number, password and farm details when you register.
- Farm & livestock data — animal records, health events, breeding records, production logs, financial transactions, worker profiles and species configuration.
- Payment data — mobile money phone number and transaction references when you subscribe or pay. We do not store full mobile money PINs.
- Support communications — messages you send us via email, in-app chat or other channels.
2.2 Information collected automatically
- Device information — device type, operating system, unique device identifiers and push notification tokens (FCM/APNs).
- Usage data — pages viewed, features used, timestamps, crash logs and performance metrics.
- Location data — approximate location derived from IP address or, if you grant permission, GPS coordinates for farm mapping.
- Network information — connection type and mobile network operator (for USSD and offline-sync features).
2.3 Information from third parties
- Payment processors — transaction status and confirmation from mobile money providers (e.g. MTN MoMo, Airtel Money via XCEL API).
- Firebase services — analytics, crash reports, push notification delivery data and in-app messaging engagement.
3. How We Use Your Information
| Purpose |
Data used |
| Provide and maintain the Service |
Account data, farm & livestock data |
| Process payments and subscriptions |
Payment data, account data |
| Send notifications (vaccination reminders, alerts, subscription expiry) |
Device tokens, account data, farm data |
| Display in-app messages and promotions |
Firebase In-App Messaging data, usage data |
| Improve the Service and develop new features |
Usage data, crash logs, anonymised analytics |
| Ensure security and prevent fraud |
Device information, usage data, IP address |
| Comply with legal obligations |
As required by applicable law |
4. Push Notifications & In-App Messages
We use Firebase Cloud Messaging (FCM) to deliver push notifications and
Firebase In-App Messaging to display contextual messages while you use the app.
- Push notifications include vaccination reminders, subscription expiry alerts, payment confirmations and farm activity updates.
- In-app messages may include feature announcements, tips, and promotional offers.
- You can disable push notifications at any time in your device settings (Android: Settings > Apps > Riisa+ > Notifications; iOS: Settings > Notifications > Riisa+).
- In-app messages are displayed based on Firebase targeting rules and can be managed through your app preferences.
5. Data Sharing & Disclosure
We do not sell your personal information. We may share data in the following circumstances:
- Service providers — payment processors (XCEL/mobile money), cloud hosting (for data storage and processing) and analytics providers (Firebase/Google) that help us operate the Service.
- Farm team members — workers you invite to your farm can see farm and livestock data as permitted by their assigned role.
- Platform administrators — authorised Riisa+ administrators may access anonymised or aggregated data for platform management. They may view individual farm data only for support, billing or compliance purposes.
- Legal requirements — if required by Ugandan law, court order or government authority.
- Business transfers — in connection with a merger, acquisition or sale of assets, with continued privacy protections.
6. Data Storage & Security
Your data is stored on secure servers. We implement industry-standard safeguards including:
- Encrypted data transmission (TLS/HTTPS) between the app and our servers.
- Hashed and salted password storage.
- Role-based access control — workers only see data their role permits.
- JWT-based authentication with token expiry.
- Regular security reviews and updates.
While we take reasonable measures to protect your data, no system is completely secure.
If you discover a vulnerability, please report it to
security@riisaplus.com.
7. Data Retention
- Account data — retained for as long as your account is active. Deleted upon account closure, subject to legal retention requirements.
- Farm & livestock data — retained while the farm is active. Farm owners may request data export or deletion.
- Payment records — retained for a minimum of 7 years for tax and regulatory compliance in Uganda.
- Usage data & logs — anonymised or deleted after 24 months.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Deletion — request deletion of your account and associated data.
- Data portability — request your farm data in a machine-readable format.
- Withdraw consent — revoke permissions (e.g. location, notifications) at any time via device settings.
- Object — object to processing of your data for direct marketing purposes.
To exercise any of these rights, contact us at
privacy@riisaplus.com.
We will respond within 30 days.
9. Children's Privacy
The Service is not intended for children under the age of 18. We do not knowingly collect
personal information from children. If you believe a child has provided us with personal data,
please contact us and we will take steps to delete it.
10. Third-Party Services
Our app integrates with the following third-party services, each governed by their own privacy policies:
- Google Firebase — analytics, crash reporting, push notifications, in-app messaging.
- Mobile money providers — MTN Mobile Money, Airtel Money (via XCEL API) for payment processing.
We encourage you to review the privacy policies of these services. We are not responsible for
the privacy practices of third-party providers.
11. International Data Transfers
Your data may be processed on servers located outside Uganda (e.g. cloud infrastructure).
Where this occurs, we ensure appropriate safeguards are in place to protect your data in
accordance with this Privacy Policy and applicable data protection laws.
12. Platform-Specific Disclosures
Google Play (Android)
- We comply with the Google Play Developer Programme Policies and the User Data policy.
- Permissions requested: Internet, push notifications, camera (optional, for animal photos), location (optional, for farm mapping).
- Data collected is disclosed in our Google Play Data Safety section.
Apple App Store (iOS)
- We comply with the Apple Developer Programme License Agreement and App Store Review Guidelines.
- App Tracking Transparency: we do not track you across other companies' apps or websites.
- Privacy Nutrition Labels are provided on our App Store listing.
- We request notification permissions at runtime, with a clear explanation of why notifications are useful.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated
via in-app notification or email. The "Last updated" date at the top of this page indicates
when the policy was last revised. Continued use of the Service after changes constitutes
acceptance of the updated policy.
14. Contact Us
If you have questions, concerns or requests regarding this Privacy Policy, contact us at:
Riisa+
A joint venture of Ibabaza Media Ltd & NIWAJ TECH Uganda Ltd
31 Ntinda - Kisaasi Road, Kampala
P.O. Box 102082, Kampala, Uganda
Email: privacy@riisaplus.com
Phone: +256 704 227253 / +256 785 350380