Banguka helps event organizers in Rwanda create events, invite guests, send SMS, and check attendees in at the door. This policy explains what personal data we collect, how we use it, and the choices you have. By using our website, mobile app, or services, you agree to the practices described here.
01 Who we are
Banguka is operated from Kigali, Rwanda. We are the data controller for account holders (event organizers, co-organizers, and door staff) who register with us. For guest data uploaded by an organizer, the organizer is the controller and Banguka acts as a processor on their behalf.
02 Information we collect
Information you provide
- Account details — name, email address, phone number, and password when you register.
- Event details — event name, date, venue, description, capacity, and cover images you upload.
- Guest lists — names, phone numbers, categories, and any custom RSVP answers you or your guests provide.
- Support requests — messages you send us through support tickets or email.
Information collected automatically
- Usage data — pages viewed, features used, and actions taken in the dashboard and app.
- Device & log data — IP address, browser or device type, and timestamps.
- Check-in data — QR scans and check-in status recorded at the door, including offline check-ins synced later.
03 How we use information
We use personal data to:
- Provide, operate, and maintain the Banguka platform and mobile app.
- Create and manage events, guest lists, RSVPs, and check-ins.
- Send SMS invitations, confirmations, reminders, and unique QR codes on an organizer's behalf.
- Process SMS credit purchases and issue invoices.
- Provide analytics and reporting to organizers about their own events.
- Respond to support requests and communicate service-related notices.
- Detect, prevent, and address fraud, abuse, and security issues.
- Comply with applicable laws in Rwanda.
04 Guest data & organizers
When an organizer uploads a guest list, those guests' details are used solely to manage that event — sending invitations, recording RSVPs, generating QR codes, and checking guests in. Guests do not need a Banguka account to RSVP.
If you are a guest and wish to access, correct, or delete your data, please contact the event organizer who invited you. You may also contact us and we will help route your request appropriately.
05 SMS communications
SMS invitations, confirmations, and reminders are sent through our SMS gateway provider (FDI) to the phone numbers provided by organizers. Each message may include a unique link or QR code tied to a specific guest. Standard carrier rates may apply to recipients. Organizers are responsible for ensuring they have a lawful basis to message the contacts they upload.
07 Payments
SMS credit purchases are processed by third-party payment providers (for example, mobile money). We store payment references and invoice records, but we do not store full card numbers or mobile money PINs on our servers. Payments are made on our website or Android app; the iOS app does not process payments.
08 Data retention
We keep personal data for as long as your account is active or as needed to provide the service. Event and guest data is retained while the associated account exists so that organizers keep their event history. We may retain certain records longer where required for legal, tax, or audit purposes. When you delete your account, we delete or anonymize your personal data within a reasonable period, subject to those legal obligations.
09 Security
We use technical and organizational measures to protect personal data, including encrypted transport (HTTPS), hashed passwords, access tokens, and role-based access controls that enforce least-privilege access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to notify you of significant incidents where required.
10 Your rights
Depending on applicable law, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your account and associated personal data.
- Object to or restrict certain processing.
- Manage your notification and communication preferences in the app at any time.
To exercise these rights, contact us using the details below. We may need to verify your identity before acting on a request.
12 Children
Banguka is intended for use by adults organizing and attending events. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us so we can remove it.
13 Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the app or by email. Your continued use of Banguka after changes take effect means you accept the updated policy.
14 Contact us
If you have questions about this policy or how we handle your data, contact us at info@itaratec.com or +250 788 760 349 — Kigali, Rwanda.