Last updated: 29 July 2026 · We follow Uganda's Data Protection and Privacy Act, 2019.
Operators and agents: name, business name, email, phone number, district, and a hashed password at signup; payout mobile-money numbers and names; router public IP addresses; and the records your business generates on the platform (plans, sessions, payments, payouts, commissions).
WiFi customers: the phone number used to pay or redeem a voucher, the device MAC and IP address your router reports (needed to grant and meter the session), the plan bought, and payment records. We do not see the content of anyone's browsing; session accounting records only volumes (bytes up/down) and times.
To run the service: authenticate you, grant WiFi sessions over RADIUS, process payments through our payment partner (ZengaPay), calculate earnings, pay out balances, prevent fraud and abuse (rate limiting, login lockout), meet legal record-keeping duties, and provide support. We do not sell personal data, and we do not use it for third-party advertising.
Your hotspot operator sees the sessions and payments made at their own locations (phone number, plan, amount — this is their sales ledger). Our payment partner processes the mobile-money transaction under their own terms. Infrastructure providers host our servers (currently DigitalOcean). Authorities may receive data when Ugandan law requires it. Nobody else.
Account and financial records are kept while your account is active and for the period Ugandan tax and communications law requires after closure. Session and RADIUS accounting data is kept for a rolling operational window and then aggregated or deleted. You can ask us what we hold about you.
Passwords are stored hashed (bcrypt), traffic to myfipay.com is encrypted (HTTPS), payment webhooks are signature-verified, router credentials are unique per device, and access to production systems is restricted and logged. No system is perfectly secure — report any concern to our support line and we will investigate promptly.
Under the Data Protection and Privacy Act you can ask for a copy of your personal data, ask us to correct it, or ask us to delete data we no longer need to keep by law. Contact support from your registered account. If you are unsatisfied you may complain to the Personal Data Protection Office (NITA-U).
We will announce material changes to this policy in the dashboard before they take effect. Questions: WhatsApp support or the support page.