Privacy Policy

Murika Ltd ("Murika", "we", "our", or "us") operates a digital agricultural marketplace connecting farmers, buyers, agents, and logistics providers across Rwanda. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our mobile applications (Murika Farmer App, Murika Agent App, Murika Logistics App) and our website at murika.co.rw (collectively, the "Services").

By using our Services, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our Services.

We collect the following categories of personal information:

Account Information: When you register, we collect your full name, phone number, email address, date of birth, and location (province, district, sector, cell, and village).

Identity & Verification Documents: For farmers and agents, we may collect national ID numbers, farm registration details, and photographs for verification purposes.

Location Data: With your permission, we collect location data in the following ways:

• Drivers (Murika Logistics App): from the moment you accept a delivery until it is delivered or cancelled, the app collects your precise GPS position (roughly every few seconds, or every 20 metres while you move — including while the app is in the background or your phone is locked) and sends it to our live-tracking service. Android shows a persistent "delivery in progress" notification and iOS shows the system location indicator while this happens. Your location is never collected outside an active delivery.

• Buyers and farmers (Murika App): your precise location is used only when you choose to pin a delivery address or collection point on the map and, with your permission, to show local weather for your farm.

• Agents (Murika Agent App): with your permission, your approximate location is used to show local weather.

Device & Usage Data: We automatically collect device identifiers, operating system version, app usage patterns, crash logs, and IP addresses to improve app performance and security.

Transaction Data: We collect records of orders placed, produce listings, deliveries, earnings, and payment-related information.

Communications: If you contact our support team, we retain records of that correspondence.

We use the information we collect to:

• Create and manage your account and verify your identity

• Connect farmers with buyers and facilitate transactions on the marketplace

• Enable agents to conduct and document farm visits

• Coordinate logistics and show a driver's live position to the farmer and buyer of an active delivery, and to Murika staff

• Send transactional notifications (order updates, delivery status, OTP codes)

• Improve, personalise, and optimise our Services

• Detect and prevent fraud, abuse, and security incidents

• Comply with legal obligations under Rwandan law

• Respond to your enquiries and provide customer support

Where required by applicable law or platform rules, we will request your explicit consent before collecting or using data for purposes not listed above.

On iOS devices, our apps use the AppTrackingTransparency framework. Before collecting any data that could be used to track you across apps and websites owned by other companies, we will display a permission prompt asking for your consent.

If you grant permission, we may use your device's advertising identifier (IDFA) to improve app performance analytics. If you deny permission, we will not collect tracking data, and all core features of the app remain fully functional.

You can change your tracking preference at any time in Settings → Privacy & Security → Tracking on your iOS device.

We do not sell your personal information. We share information only in the following circumstances:

Within the Platform: Farmers' produce listings (name, location, produce type, and price) are visible to buyers and agents. During an active delivery, the farmer can follow the driver's live position while the driver is on the way to the pickup; the buyer can follow the driver's live position from the moment the produce is picked up until it is delivered; and Murika staff can see every driver with a delivery in progress. The driver's name, vehicle registration and phone number are shared with the farmer and buyer of that delivery, and the farmer's and buyer's names, phone numbers and addresses are shared with the driver, so that they can coordinate the handover.

Service Providers: We share data with third-party providers that help us operate our Services: Google Firebase (authentication, push notifications, and the Realtime Database that carries live driver positions), Cloudflare (storage of uploaded photos and documents), mobile-money and payment gateway providers (to collect and pay out money), and SMS providers (for OTP codes and notifications). These providers process data only on our instructions and are contractually bound to protect it. Map tiles and road routes are fetched from the public OpenStreetMap and Project OSRM services, which receive the coordinates needed to draw a map or route (pickup points, delivery addresses, driver positions) but no names or account details.

Legal Requirements: We may disclose your information if required by Rwandan law, court order, or governmental authority.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.

We retain your personal information for as long as your account is active or as needed to provide our Services. If you request account deletion, we will delete or anonymise your data within 30 days, except where we are legally required to retain it (for example, transaction records for tax purposes).

Live location: a driver's live position is kept in the real-time tracking service only while the delivery is in progress and is removed automatically when the delivery is delivered or cancelled. The route the driver took (a simplified path with its distance and timing), together with the pickup and delivery points, is kept with the delivery record for dispute resolution and reporting, for as long as the transaction records themselves; the detailed position history behind it is deleted after 180 days.

We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), secure authentication, and access controls to protect your personal information. However, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use strong passwords and keep your login credentials confidential.

Our Services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us immediately at info@murika.co.rw and we will promptly delete it.

Under Rwanda's Law No. 058/2021 relating to the protection of personal data and privacy, you have the right to:

• Access the personal information we hold about you

• Correct inaccurate or incomplete information

• Delete your personal information ("right to erasure")

• Restrict or object to certain processing

• Receive a copy of the data you gave us in a portable format

• Withdraw consent at any time where processing is based on consent

• Lodge a complaint with the National Cyber Security Authority (NCSA) if you believe your data has been mishandled

To exercise any of these rights, please contact us at info@murika.co.rw. We will respond within 30 days.

Drivers: you can stop live location sharing at any time by turning off the app's location permission in your phone settings. Because live sharing is how farmers, buyers and Murika follow a delivery, you will not be able to carry out deliveries while it is off.

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and, where appropriate, notify you via email or in-app notification. Your continued use of our Services after any change constitutes your acceptance of the revised policy.

Murika Ltd is the data controller for the personal information described in this policy and processes it in accordance with Law No. 058/2021 of 13/10/2021 relating to the protection of personal data and privacy in Rwanda. Murika Ltd is registered with the National Cyber Security Authority (NCSA).

Some of our service providers store data outside Rwanda. In particular, Google Firebase (authentication, notifications and live driver positions) stores data in Google's data centres in the European Union (Belgium), and Cloudflare stores uploaded photos and documents in its global network. Where we transfer personal information outside Rwanda, we do so only to providers that offer adequate safeguards and in line with the conditions set by Law No. 058/2021 and the NCSA.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

Murika Ltd

Musanze, Muhoza, Hanga Hub

Kigali, Rwanda

Email: info@murika.co.rw

Phone: 6069