Privacy policy
Last updated: 27 September 2026
Who operates this app
Malevu operates Landlord Uganda. Contact us about privacy or your information at championboyderrick@gmail.com.
Information we collect
You can browse homes without an account. When you request a viewing or contact the landlord team, we collect the details you submit, such as your name, email, phone number, preferred viewing date and property enquiry. Booking requests store your name, phone number, the quoted booking fee, request status and meeting arrangements. Landlords may record tenant names, phone numbers and tenancy dates for their properties. Billing records include rent and utility amounts, descriptions, due dates, requested reminder times, landlord-recorded payment status and confirmation of WhatsApp consent. Automatic WhatsApp delivery is not connected yet; these records remain inside the app. Payment collection is not connected, and booking requests retain a pending payment status. Invited accounts store account details, a protected password hash and sign-in sessions. Property management records include addresses, property coordinates when supplied, descriptions, photos, verification details, rental terms and rental history. We also record administrative actions and security information used to protect access and limit abuse.
How information is used and shared
We use this information to display listings, arrange viewings, manage property and rental records, authenticate accounts and protect the service. Approved property details and approved photos are public. Administrators can access operational records; approved landlords and tenants receive access appropriate to their role and assigned records. Contact details supplied for an enquiry or booking are used by the team to handle the request and coordinate meetings with the assigned landlord.
Render hosts the app server, and Supabase provides the database and private photo storage. Hosting is currently in Europe, so information may be processed outside Uganda. Map and external image providers receive ordinary web request information, such as your IP address, when their content loads. External links are subject to the destination's privacy practices.
WhatsApp sign-in
When enabled, requesting a WhatsApp sign-in code sends your registered phone number and a one-time code to Meta through WhatsApp Business. The app stores a protected code digest, expiry and attempt count, and records when phone control is verified. Codes expire after five minutes and are removed after successful use. Failed or expired challenges are replaced on a later request. This optional sign-in feature is separate from booking alerts and billing reminders. Meta processes delivery under its own privacy terms.
Device access and cookies
The Android app uses internet access and lets you choose individual images through Android's file picker. It does not request your contacts or device-location permission. Property coordinates are entered as listing information. Essential session cookies keep you signed in. The app does not include an advertising SDK.
Security and retention
Connections use HTTPS. Passwords are hashed, and account and private-photo access are restricted. No service can guarantee absolute security. Records are retained while needed to operate accounts, handle enquiries and maintain rental history. There is currently no automatic age-based deletion schedule. Rental, transaction and security records may need to be retained to handle ongoing agreements, disputes, fraud prevention or legal obligations. When reviewing a deletion request, we will explain any retained records and the reason and period for retention.
Your choices and deletion requests
You can request access to, correction of, or deletion of your information by emailing our support address. You do not need to sign in to request deletion. See Delete your account or data for instructions, including requests from people who contacted us without creating an account. Requests are handled manually after identity verification; signing out or uninstalling the app does not delete server records.
Policy changes
We will update this page when our practices change and revise the date above. Contact championboyderrick@gmail.com if you have a question.