Privacy policy

Last updated 29 October 2026

This policy explains what Rapcio collects when you use the Rapcio app, app.rapcio.com and rapcio.com, why we collect it and what you can do about it. We follow Uganda's Data Protection and Privacy Act, 2019.

What we collect

Your account: your phone number (or email, if you sign in that way) and the name you choose.
Your profile: your role (fan, player, guardian, coach or scout), date of birth, country, and the profile and cover photos you add.
Players: position, club, match stats confirmed by club officials, and the documents and photos sent for verification. ID numbers are kept only as a scrambled code (a keyed hash) and the last four characters, so the full number cannot be read back.
Children: for a player under 18, the guardian linked to them and the permissions the guardian gave.
What you post: videos, photos, comments and sounds.
Tickets and rewards: what you bought or redeemed and when. Payments are handled by our payment provider; we never see or keep your card number or mobile money PIN.
Your phone: a notification token so we can send you alerts, and your location only when you ask for games or places near you.
Visits to our websites: counted without cookies. We record the page, the site that sent you, your country and your approximate town (rounded to about 10 km). Your IP address is not stored; a visitor is counted with a code that changes every day.
Usage of the app: only if you agree to it in the app, and you can turn it off at any time.

Why we use it

To run your account and sign you in with a one-time code sent by SMS. The codes are stored only in scrambled form and deleted after 48 hours.
To show players' verified profiles to the clubs, scouts and fans they choose.
To sell and check tickets, and to pay clubs what they are owed.
To keep Rapcio safe: checking scouts, reviewing reported posts, and stopping fake accounts and automated abuse.
To understand which pages people use and where they come from, so we can improve Rapcio.

We do not sell your data, and we do not show advertising based on it.

Who helps us run Rapcio

Accounts, the database and files are on servers we run ourselves. These companies process data for us, only for the purpose given:

Africa's Talking: sending sign-in codes and invites by SMS.
Flutterwave: card and mobile money payments.
Didit: ID checks, when a player chooses "Verify ID". Didit checks the document and a selfie, and tells us the result.
Cloudflare: protecting our websites, the human check before a sign-in code is sent, and the country and town of website visits.
Google: maps, and delivering notifications to Android phones.

Some of these companies store data outside Uganda. We use them only with safeguards that keep it protected.

Children

A profile for a player under 18 needs a parent or guardian, who approves what it shows. Outside their own club, under-18s are shown with their first name and last initial, and photos follow the guardian's choice. Scouts contact a child only through their club or guardian.

Who can see what

Your public profile shows only what you, or your guardian, choose.
Verification documents are seen only by you and the Rapcio team members who check them.
Clubs see the players on their squad and the tickets they sold.

How long we keep it

We keep your data while you have an account. Sign-in codes go after 48 hours and raw website visit records after 48 hours (we keep only daily totals). If you ask us to delete your account, we delete or anonymise your data, except records the law requires us to keep, such as payments.

Your rights

You can ask to see the data we hold about you, to correct it, to delete it, or to stop us using it for a purpose. Write to us using the contact below; we answer within 30 days. If you are not satisfied, you can complain to Uganda's Personal Data Protection Office.

Changes

If we change this policy, we update the date at the top and tell you in the app before the change applies.

Contact

Rapcio, Kampala, Uganda. Our contact email will be listed here and on rapcio.com.