Data Collection: We collect information you provide when you sign up, as well as some technical data generated automatically when you use the KwiGO mobile app.
Usage: We use this to operate the app, show you relevant Offers, keep your account secure, and continuously improve your experience.
Partners: We work with trusted technology partners to help us run the KwiGO mobile app, all of whom are bound by strict confidentiality obligations.
Merchants: Your personal details are never shared with Merchants; they only receive an encrypted code to process your Redemption.
Control: You are in control of your data at all times—you can access, correct, or delete it by contacting us directly.
Notifications: We will always notify you before making any changes to this Privacy Policy.
1. Definitions
The following definitions apply throughout this Privacy Policy. Capitalized terms not defined here carry the meanings given to them in the KwiGO Terms and Conditions of Service.
refers to KwiGO and the KwiGO mobile application, website, and all related digital tools and services operated by KwiGO. Throughout this Privacy Policy, the terms "KwiGO" and "Platform" are used interchangeably and carry the same meaning.
means the buyer; the individual (singular or plural) who registers for and uses the Platform to access relevant Offers. Any reference to "User" includes the plural "Users" and vice versa.
means the independent seller or service provider (singular or plural) that lists relevant Offers on the Platform pursuant to a Merchant Agreement with KwiGO. Any reference to "Merchant" includes the plural "Merchants" and vice versa.
means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, location, device identifiers, and usage data.
means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
means the entity that determines the purposes and means of Processing Personal Data. KwiGO is the Data Controller in respect of Personal Data collected through the Platform.
means any third party that processes Personal Data on behalf of and under the instructions of KwiGO as Data Controller.
means a freely given, specific, informed, and unambiguous indication of agreement by a User to the Processing of their Personal Data for a stated purpose.
(also referred to as "Law" or "Rwandan Law" throughout this Privacy Policy) means the laws and regulations of the Republic of Rwanda such as data protection and privacy, (Law N° 058/2021 of 13/10/2021 Relating to the Protection of Personal Data and Privacy in Rwanda) and any other relevant sector-specific regulations applicable to KwiGO's operations.
means any relevant temporary or permanent discounts, promotion, deal, or value-added service made available to Users by a Merchant through the KwiGO mobile app.
means the act of a User claiming or utilizing an Offer through the KwiGO mobile app's in-app verification mechanisms, such as QR codes, promotional codes, or such other methods as KwiGO may designate from time to time.
means the registered profile created by a User on the KwiGO mobile app, through which the User accesses the Platform and its relevant Offers.
2. Who We Are
KwiGO ("KwiGO", "we", "us", or "our") is a company incorporated under the laws of the Republic of Rwanda. We operate the KwiGO mobile application and all associated services—a digital lifestyle and discount marketplace connecting Users with independent Merchants. This Privacy Policy explains how KwiGO collects, uses, holds, and protects your Personal Data when you access or use the Platform. It applies to all Users and should be read alongside our Terms and Conditions of Service.
The Platform is the Data Controller in respect of Personal Data collected through the Platform. If you have any questions about this Privacy Policy or how your data is handled, please contact us at the details provided in Section 15.
3. Scope and Application
This Privacy Policy applies to all Personal Data collected by the Platform through:
- The KwiGO mobile app on iOS and Android;
- The KwiGO website at www.kwigo.app;
- Any related digital services, communications, or interactions with KwiGO.
4. Children's Privacy
Important: The KwiGO mobile app is not intended for and may not be used by individuals under the age of 16. The Platform does not knowingly collect Personal Data from anyone under 16 years of age.
By registering for and using the Platform, you confirm that you are at least 16 years of age. If the Platform becomes aware that it has inadvertently collected Personal Data from a person under the age of 16, KwiGO will take immediate steps to delete that data from its systems. If you believe that a minor has provided Personal Data through the Platform, please contact us immediately at support@kwigo.app. KwiGO may use age-verification technical measures during registration to ensure compliance with this age limit.
5. Personal Data We Collect
The Platform collects Personal Data in the following categories, depending on how you interact with the KwiGO mobile app:
5.1 Data You Provide Directly
- Full name;
- Email address;
- Phone number;
- Location;
- Payment information;
- Password (stored in encrypted form - KwiGO does not have access to your plain-text password). KwiGO uses industry-standard secure hashing protocols;
- Profile information you choose to provide; and
- Any content, reviews, ratings, or feedback you submit through the Platform.
5.2 Data Collected Automatically
When you use the KwiGO mobile app, the Platform and its authorised service providers may automatically collect the following technical and behavioral data:
- Device information, including device type, operating system, and unique device identifiers;
- App usage data, including pages viewed, features accessed, time spent on the Platform, and interaction patterns;
- Offer discovery and Redemption activity, including which relevant Offers you view, save, and redeem;
- Log data, including IP address, access times, and error reports; and
- Location data, where you have granted the KwiGO mobile app permission to access your device's location services, used solely to surface relevant nearby Offers.
5.3 Data From Third-Party Service Providers
In connection with the operation of the Platform, KwiGO works with trusted third-party service providers who may process certain technical data on KwiGO's behalf, including in connection with payment processing, fraud detection, app analytics, and cloud infrastructure. Data processed by such providers is handled in accordance with Section 8 of this Privacy Policy.
6. How We Use Your Personal Data
The Platform processes your Personal Data only for specific, legitimate purposes. We do not process your data in any manner incompatible with the purposes for which it was collected. The purposes for which we use your Personal Data are as follows:
6.1 To Provide and Operate the Platform
- Creating and managing your Account;
- Authenticating your identity when you log in;
- Enabling you to discover, save, and redeem relevant Offers on the Platform;
- Processing and validating Redemptions with Merchants; and
- Providing customer support and responding to your enquiries.
6.2 To Personalize Your Experience
- Recommending relevant Offers that may be of interest based on your activity on the Platform;
- Customizing the content and layout of the KwiGO mobile app based on your usage patterns; and
- Remembering your preferences to improve your experience across sessions.
6.3 To Maintain Platform Security and Integrity
- Detecting, investigating, and preventing fraudulent, abusive, or unauthorized activity on the Platform;
- Verifying the validity of Offer Redemptions;
- Monitoring Platform performance and identifying technical issues; and
- Protecting the rights, property, and safety of KwiGO, Users, and Merchants.
6.4 To Improve the Platform
- Conducting internal analytics and research to understand how Users interact with the Platform;
- Identifying areas for product improvement and new feature development; and
- Measuring the performance and effectiveness of relevant Offers and Platform features.
6.5 To Communicate With You
- Sending transactional communications, including Account confirmations, Redemption confirmations, and security alerts;
- Notifying you of material changes to the Terms and Conditions of Service or this Privacy Policy; and
- Sending promotional communications and relevant Offer recommendations, where you have consented to receive such communications and subject to your right to opt out at any time.
Note: Transactional emails such as Redemption confirmations are mandatory for service functionality and cannot be opted out of.
6.6 To Comply With Legal Obligations
Complying with Applicable law and responding to lawful requests from regulatory or law enforcement authorities.
7. Legal Basis for Processing
The Platform processes your Personal Data on the following legal bases, in accordance with Applicable Law, such as the Law N° 058/2021 of 13/10/2021 Relating to the Protection of Personal Data and Privacy in Rwanda:
- Contract performance: Processing necessary to provide you with access to the Platform and to fulfil our obligations to you as a registered User;
- Legitimate interests: Processing necessary for KwiGO's legitimate business interests, such as Platform security, fraud prevention, service improvement, and analytics, where such interests are not overridden by your rights and interests;
- Consent: Where you have given your express Consent, for example in connection with location access or receiving promotional communications. You may withdraw your Consent at any time without affecting the lawfulness of Processing carried out prior to withdrawal; and
- Legal obligation: Processing required to comply with a legal or regulatory obligation under Applicable Law.
8. How We Share Your Personal Data
8.1 Authorised Service Providers
The Platform engages trusted third-party service providers to support its operation. These providers act as Data Processors on KwiGO's behalf and are contractually bound to process your Personal Data in accordance with Applicable Law. Categories of service providers include:
- Cloud hosting and infrastructure providers;
- Payment processing and transaction security providers;
- Fraud detection and Platform security providers;
- App analytics and performance monitoring providers; and
- Customer support and communication tools.
KwiGO does not authorize any service provider to use your Personal Data for their own independent purposes.
8.2 Merchants
The Platform will not share User information with any Merchant at any time, except for an encrypted code required to redeem relevant Offers as a reference or verification code.
8.3 Legal and Regulatory Disclosure
KwiGO may disclose your Personal Data to law enforcement agencies, regulatory bodies, or other third parties where required to do so by law, court order, or other legal process, or where the Platform reasonably believes such disclosure is necessary to protect the rights, property, or safety of KwiGO, its Users and Merchants.
8.4 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of all or substantially all of KwiGO's assets, your Personal Data may be transferred to the relevant successor entity as part of that transaction. The Platform will provide notice to Users and Merchants via the KwiGO mobile app or by email before Personal Data is transferred and becomes subject to a different privacy policy.
9. Data Retention and Deletion
The Platform retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by Applicable Law, such as Rwandan financial regulations. The following general retention principles apply:
- Account data is retained for the duration of your registration on the Platform and for the period required by law, following Account closure, to comply with legal obligations and to resolve any outstanding disputes or claims;
- Transaction and Redemption records are retained for the number of years required in accordance with Rwandan financial record-keeping requirements;
- Technical and usage data collected for analytics and security purposes is retained for as long as necessary for the Platform to fulfil the purposes described in Section 6; and
- Communications and support records are retained for the period required by Applicable Law or for as long as is reasonably necessary to resolve any related disputes.
Where Personal Data is no longer required for any purpose, the Platform will securely delete or anonymize it in accordance with its internal data management procedures.
10. Your Rights
Subject to Applicable Law, such as the Law N° 058/2021 of 13/10/2021 Relating to the Protection of Personal Data and Privacy in Rwanda, you have the following rights in respect of your Personal Data held by KwiGO:
- Right of access: You have the right to request a copy of the Personal Data the Platform holds about you;
- Right to rectification: You have the right to request that inaccurate or incomplete Personal Data be corrected;
- Right to erasure: You have the right to request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to KwiGO's legal retention obligations;
- Right to restriction: You have the right to request that the Platform restricts the Processing of your Personal Data in certain circumstances;
- Right to object: You have the right to object to the Processing of your Personal Data where the Platform relies on legitimate interests as the legal basis for Processing;
- Right to withdraw Consent: Where Processing is based on your Consent, you have the right to withdraw that Consent at any time, without affecting the lawfulness of Processing carried out prior to withdrawal; and
- Right to data portability: In accordance with Rwandan Law, you have the right to receive your Personal Data in a structured, commonly used, and machine-readable format.
To exercise any of the above rights, please submit a written request to support@kwigo.app. The Platform will respond to all valid requests within 5 working days of receipt. KwiGO reserves the right to verify your identity before Processing any request and to refuse requests that are manifestly unfounded, excessive, or repetitive.
11. Data Security
The Platform implements appropriate technical and organizational measures designed to protect your Personal Data against unauthorized access, loss, destruction, alteration, or disclosure. These measures include, but are not limited to:
- Encryption of data in transit and at rest;
- Access controls limiting Personal Data access to authorised personnel on a need-to-know basis;
- Secure password storage using industry-standard hashing protocols;
- Regular security assessments and monitoring of the Platform; and
- Contractual security obligations imposed on all third-party service providers.
While the Platform takes reasonable steps to protect your Personal Data, no method of electronic transmission or storage is entirely secure. KwiGO cannot guarantee absolute security and encourages Users to take responsibility for the security of their own Account credentials. In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, the Platform will notify you and the relevant Rwandan regulatory authority in accordance with Applicable Law.
12. International Data Transfers
The Platform is based in Rwanda and processes your Personal Data primarily within Rwanda. Where KwiGO engages third-party service providers who process Personal Data outside of Rwanda—for example, in connection with cloud infrastructure or analytics services—the Platform ensures that appropriate safeguards are in place to protect your Personal Data in accordance with Applicable Law.
Such safeguards may include contractual clauses requiring the recipient to provide equivalent levels of data protection to those applicable in Rwanda under the Law N° 058/2021 of 13/10/2021. By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in countries outside of Rwanda in connection with the operation of the Platform, subject to the protections described in this Section.
13. Cookies and Similar Technologies
The KwiGO mobile app and associated website may use cookies, pixels, software development kits (SDKs), and similar tracking technologies to support the operation and improvement of the Platform. These technologies may be used to:
- Maintain your session and keep you logged in to the KwiGO mobile app;
- Remember your preferences and settings;
- Analyze how Users interact with the Platform to support performance monitoring and improvement; and
- Support the security and fraud prevention functions of the Platform.
Where required by Applicable Law, the Platform will seek your Consent before placing non-essential cookies or similar technologies on your device. You may manage your cookie preferences through your device or browser settings; however, disabling certain technologies may affect the functionality of the KwiGO mobile app.
14. Updates to This Privacy Policy
The Platform reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, the KwiGO mobile app, or Applicable Law. Where changes are material, KwiGO will notify you by email to the address registered to your Account and/or by an in-app notification through the KwiGO mobile app at the time the update takes effect.
The updated Privacy Policy will also be available at www.kwigo.app. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not accept the updated Privacy Policy, you must cease using the Platform and close your Account prior to the effective date.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which the Platform handles your Personal Data, please contact our team at:
By downloading, registering for, or using the KwiGO platforms, the User certifies having read, understood, and agreed to be bound by this Privacy Policy, and consents to the collection and use of their Personal Data as described herein.