Privacy Policy

Last updated: 19 September 2026. YouFundMe ("we", "us", "our") respects your privacy. This notice explains how we collect, use, share, and protect your personal data, and the rights you have. It is written to align with Uganda's Data Protection and Privacy Act, 2019 and other laws that apply to us.

1. Who We Are

YouFundMe is the data controller for the personal data processed through the Platform. For privacy questions or to exercise your rights, contact our Data Protection Officer at privacy@youfundme.org.

2. Information We Collect

Information you provide: your name, email address, phone number, and, for Organizers, identity-verification documents and payout details. Transaction information: donation amounts, currency, campaign, payment method, and the fee, tax, and tip included in each payment. Information collected automatically: device and usage data such as IP address, browser type, pages viewed, and cookies. Information from third parties: payment and verification providers may share the result of a transaction or an identity check. We do not store raw card numbers; card data is handled by our PCI-DSS compliant payment providers.

3. Legal Bases for Processing

We process your data where it is necessary to perform our contract with you (to run your account, campaign, or donation), to comply with a legal obligation (such as anti-money-laundering, tax, and record-keeping duties), for our legitimate interests (to secure the Platform and prevent fraud), or with your consent (which you may withdraw at any time).

4. How We Use Your Information

• Process donations, withdrawals, refunds, and chargebacks
• Verify the identity (KYC) of Organizers and screen against sanctions and fraud
• Send transaction confirmations, receipts, and campaign updates
• Provide support and respond to your requests
• Keep the Platform secure and comply with legal and regulatory obligations
• Improve and develop our services

5. How We Share Your Information

• Campaign Organizers, when you donate (unless you choose to give anonymously)
• Payment providers, to process and settle transactions and payouts
• Tax authorities, where we are required to report or remit tax collected on donations
• Identity-verification and anti-fraud providers, for KYC and screening
• Communication providers, to send email and SMS notifications
• Professional advisers, auditors, and law enforcement or regulators, where legally required
• A successor entity, in connection with a merger, acquisition, or sale of assets

We require our service providers to protect your data and to use it only for the services they provide to us. We do not sell your personal data.

6. International Transfers

Some of our providers operate outside Uganda, so your data may be transferred to and processed in other countries. Where we do this, we take steps to ensure your data receives a level of protection consistent with applicable law.

7. Anonymous Donations

If you choose to donate anonymously, your name is not displayed publicly. The Organizer and YouFundMe staff may still access your information for receipting, support, and fraud-prevention purposes.

8. Data Retention

We keep your personal data for as long as your account is active and as needed to provide the service. Identity-verification documents are purged 30 days after a verification decision. Transaction and financial records are retained for at least 7 years to meet legal and tax obligations. When data is no longer required, we delete or anonymise it.

9. Your Rights

Subject to applicable law, you have the right to access your data; to correct inaccurate data; to erase your data; to restrict or object to certain processing; to data portability; and to withdraw consent where processing is based on consent. You can also permanently delete your account from your account settings, which erases or anonymises your personal data as described above. To exercise a right, contact privacy@youfundme.org; we will respond within 30 days. If you are not satisfied, you may lodge a complaint with Uganda's Personal Data Protection Office.

10. Cookies

We use essential cookies to keep you signed in and to remember your preferences. We do not use advertising or third-party tracking cookies. You can control cookies through your browser settings, though some features may not work without them.

11. Security

We use technical and organisational measures to protect your data, including encryption in transit (HTTPS) and at rest, access controls, and a double-entry ledger for financial integrity. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your data and to respond quickly to any incident.

12. Children

The Platform is not intended for anyone under 18, and we do not knowingly collect data from children. If we learn that we have collected data from a child, we will delete it.

13. Data Breach

If a breach affects your personal data and is likely to cause you harm, we will notify you and the relevant authority as required by law, and will act promptly to contain and remedy the incident.

14. Changes and Contact

We may update this notice from time to time and will notify you of significant changes by email or platform notice. Continued use after changes take effect constitutes acceptance. For any question about this notice or your data, contact our Data Protection Officer at privacy@youfundme.org.