Privacy Policy

This Privacy Policy explains how Juba Car , operated by [Juba Car ] ( “Juba Car,” “we,” “us,” or “our” ), collects, uses, discloses, stores, transfers, deletes, and protects information when you use the Juba Car mobile application, website, seller tools, dealer tools, messaging features, support channels, and related services (together, the “Service” ). It is designed to support compliance with Google Play, Apple App Store, and Tanzania personal data protection requirements, including the Personal Data Protection Act, 2022 (Cap. 44) and requirements of the Tanzania Personal Data Protection Commission ( “PDPC” ) where they apply.

Juba Car is a vehicle marketplace and discovery platform that helps users browse vehicle listings, create listings, contact sellers or buyers, manage accounts, receive notifications, and use related vehicle services. By using the Service, you acknowledge that your information will be handled as described in this Privacy Policy.

1. Information we collect

We collect information in the ways described below. Some information is required to provide the Service, while other information is optional or collected only when you use a specific feature or grant device permission.

1.1 Account and profile information

– Name, username, email address, phone number, password or authentication credentials, profile photo, language preference, country, city, and account type such as buyer, private seller, dealer, or admin.

– Account verification details, such as one-time passcodes, login history, security events, and fraud-prevention signals.

– Optional seller or dealer profile information, such as business name, business address, opening hours, license information, dealership logo, and contact details.

1.2 Vehicle listing and marketplace information

– Vehicle listing details that you submit, including make, model, year, mileage, price, condition, description, city or location, photos, videos, documents, seller contact details, availability status, and related listing metadata.

– Information about your interactions with listings, including searches, saved vehicles, favorites, inquiries, messages, call-button taps, view counts, reports, and listing-management activity.

1.3 Communications and support information

– Messages, chat content, attachments, reports, reviews, feedback, customer-support requests, emails, call requests, and other communications you send through the Service.

– We may monitor, review, or retain communications to provide support, prevent fraud, enforce our Terms, protect users, and comply with legal obligations. We do not sell private messages.

1.4 Payment and transaction information

– If Juba Car offers paid listing packages, promoted listings, dealer plans, inspections, subscriptions, booking fees, deposits, or other paid features, we may collect transaction records, invoices, receipts, billing name, billing contact information, payment status, and plan details.

– Card, mobile-money, bank, wallet, or other payment credentials are processed by our payment providers, app-store billing providers, or financial partners. Unless clearly stated, we do not store full card numbers or full payment credentials on our servers.

1.5 Location information

– Approximate location, such as country, region, city, or IP-based location, to show relevant vehicles and protect the Service.

– Precise device location only if you grant permission, for features such as nearby vehicle search, maps, directions, listing location, delivery or inspection coordination, or fraud prevention. You can usually use manual city/location entry instead of granting precise location permission.

– We do not collect precise location in the background unless the app clearly discloses that feature and you give the required platform permission.

1.6 Photos, camera, files, and documents

– If you upload vehicle photos, videos, documents, profile photos, dealer logos, identity or business-verification documents, or support attachments, we collect the files you choose to provide.

– Camera, photo library, and file access are requested only when needed for a feature, such as creating a listing or sending an attachment. You can manage these permissions in your device settings.

1.7 Device, usage, analytics, and diagnostics information

– Device type, operating system, app version, browser type, IP address, device identifiers, advertising identifiers where permitted, language, network information, referring URLs, pages/screens viewed, feature usage, crash logs, diagnostic data, performance data, and security logs.

– We use this information to keep the app secure, fix bugs, understand usage, improve performance, prevent abuse, and, if enabled and permitted, measure advertising or marketing effectiveness.

1.8 Information from third parties

– Login or identity providers, such as Apple, Google, or Facebook, may provide account information if you choose to sign in using them.

– Payment processors, fraud-prevention providers, analytics providers, advertising partners, hosting providers, maps providers, SMS/email providers, vehicle-data providers, and support tools may provide information needed to operate the Service.

– Dealers, sellers, buyers, law-enforcement authorities, regulators, public sources, or business partners may provide information when permitted by law.

2. How we use information

We use information for the following purposes:

– To create, authenticate, secure, and manage accounts.

– To publish, manage, rank, display, promote, moderate, and remove vehicle listings.

– To help buyers and sellers communicate, respond to inquiries, arrange inspections, request calls, and manage marketplace activity.

– To process payments, subscriptions, receipts, refunds, billing, seller plans, dealer plans, promoted listings, and related transaction support.

– To provide search, filters, maps, nearby results, saved vehicles, favorites, recommendations, and notifications.

– To verify users, listings, dealers, businesses, documents, and ownership or authority where applicable.

– To detect, prevent, investigate, and respond to fraud, scams, spam, fake listings, unsafe behavior, illegal activity, security incidents, and violations of our Terms.

– To provide customer support and respond to reports, complaints, questions, disputes, and legal requests.

– To improve, test, analyze, personalize, and develop the Service.

– To send service communications, security notices, account alerts, policy updates, and, where permitted, marketing communications that you may opt out of.

– To comply with applicable laws, enforce agreements, protect rights, and support legal, tax, accounting, audit, and regulatory obligations.

3. Legal bases for processing

Where privacy law requires a legal basis, we process information based on one or more of the following: your consent; performance of a contract with you; a lawful, explicit, specified, and legitimate purpose connected with the Service; our legitimate interests, such as operating, securing, improving, and protecting the marketplace; compliance with legal, tax, accounting, consumer-protection, app-store, or regulatory obligations; and protection of vital interests, safety, fraud-prevention, or public-interest grounds where applicable. Where Tanzania law applies, we collect personal data directly from you where practicable, notify you of the purposes and intended recipients before or at collection, and process only data that is necessary, adequate, relevant, and not excessive for the stated purpose.

4. Tanzania Personal Data Protection Act and PDPC compliance

Juba Car is established in Tanzania, offers services to people in Tanzania, processes personal data in the United Republic of Tanzania, or otherwise falls within Tanzania privacy law, we will process personal data in accordance with Tanzania’s Personal Data Protection Act, 2022 (Cap. 44), its implementing regulations, and lawful directions of the Personal Data Protection Commission ( PDPC ).

4.1 Our role, registration, and Data Protection Officer

– Data controller: For most Juba Car services, Juba Car determines the purposes and means of processing personal data and acts as the data controller.

– Data processor: Where we process data only on documented instructions of a dealer, business customer, payment provider, inspection partner, or other controller, we may act as a data processor.

– PDPC registration: We will maintain any registration required by the PDPC before collecting or processing personal data in Tanzania.

– Internal policy: We maintain a personal data protection policy or code of conduct for staff, contractors, processors, and service providers who handle personal data for Juba Car.

4.2 Tanzania processing principles

Where Tanzania law applies, we apply the following principles:

– Process personal data lawfully, fairly, and transparently.

– Collect personal data for explicit, specified, and legitimate purposes and avoid incompatible further processing.

– Collect only data that is adequate, relevant, and necessary for the Service.

– Take reasonable steps to keep personal data accurate, complete, relevant, up to date, and not misleading.

– Keep personal data in identifiable form only for as long as necessary or legally required.

– Process personal data in accordance with data-subject rights.

– Use appropriate technical and organizational security measures against unauthorized access, unlawful processing, loss, destruction, alteration, or damage.

– Do not transfer personal data outside Tanzania contrary to applicable law or PDPC requirements.

4.3 Tanzania data-subject rights

Subject to legal conditions, identity verification, and lawful exceptions, users in Tanzania may request to exercise the following rights:

– Right to be informed about the purposes of collection and processing, intended recipients, and whether personal data is being processed.

– Right of access to personal data, purposes of processing, and recipients or categories of recipients.

– Right to rectification of personal data that is incorrect, changed, outdated, incomplete, or misleading.

– Right to erasure or destruction where personal data is no longer required, consent has been withdrawn, the user no longer wishes processing to continue, commercial processing is objected to, processing violates law, or erasure is otherwise required by law.

– Right to restrict, suspend, or prevent processing where processing is likely to cause substantial damage or where the law otherwise allows restriction.

– Right to data portability where applicable and technically feasible.

– Right to object , including objection to direct marketing and certain other processing.

– Right to withdraw consent where processing is based on consent, without affecting lawful processing already completed before withdrawal.

– Rights relating to automated decision-making , including information about logic involved and a request for human review or reconsideration where a solely automated decision significantly affects you, unless a lawful exception applies.

– Right to complain to us and, where unresolved or permitted by law, to the PDPC.

– Right to compensation or other remedies where recognized by applicable law and proven through the required legal process.

– Right of transmission to heirs where recognized by applicable Tanzania law.

4.4 How to submit Tanzania PDPA requests

– Use the in-app privacy tools where available, or email info@jubacar.com with the subject line “Tanzania PDPA Request” .

– Tell us the right you want to exercise and provide enough information for us to verify your identity and locate your account, such as your account email, phone number, username, listing ID, or message thread ID.

– We may ask for additional information, proof of authority, or a prescribed form where Tanzania regulations require it.

– Where Tanzania regulations prescribe specific timelines, we will follow them. For example, we aim to acknowledge applicable restriction/prevention requests within 72 hours and consider them within the required period, and we aim to consider rectification or erasure/destruction requests within the applicable 14-day period, unless a lawful exception applies.

– If we reject a request, we will explain the reason where required by law and provide information about complaint options.

4.5 Sensitive personal data

Sensitive personal data may include information about children, health, biometrics, financial transactions, offences, genetic data, religious or philosophical beliefs, political opinions, trade-union membership, sex life, gender, race, ethnic origin, security measures, or other high-risk information. Juba Car does not intentionally request sensitive personal data except where it is necessary for account security, verification, payment, fraud prevention, legal compliance, safety, or a feature you choose to use. Where required, we will obtain consent or rely on another lawful basis before processing sensitive personal data.

4.6 Direct marketing and consent withdrawal

You may opt out of direct marketing at any time by using unsubscribe links, changing in-app settings, or contacting info@jubacar.com . You may withdraw consent for optional processing at any time. Withdrawing consent may limit certain optional features, but it will not affect the lawfulness of processing completed before withdrawal or processing that remains necessary for legal, safety, contractual, or fraud-prevention reasons.

4.7 International transfers from Tanzania

Juba Car may use cloud hosting, analytics, crash reporting, authentication, SMS/email, maps, payment, app-store, moderation, support, or security providers located outside Tanzania. Where Tanzania law applies and personal data is transferred outside Tanzania, we will use lawful transfer mechanisms such as consent where required, adequacy or necessity assessments, written contracts, data-processing agreements, security safeguards, and PDPC authorization or permits where required. Recipients must process transferred data only for the authorized purpose and must not further disclose or transfer it except as permitted by law and our contract.

4.8 Processors, security, breach notification, and DPIA

– We require service providers that process personal data for us to follow documented instructions, protect personal data, use appropriate security measures, and support compliance with data-subject rights.

– We appoint a Data Protection Officer or privacy lead to oversee security controls and compliance where required.

– If a security breach affects personal data processed by or for Juba Car, we will investigate and notify the PDPC without undue delay where required by Tanzania law. We will also notify affected users where required by law or where notification is appropriate to help protect them.

– Where a new product, feature, or processing activity is likely to affect users’ rights and freedoms, including high-risk automated decision-making, large-scale processing, processing of sensitive personal data, or systematic monitoring, we will conduct a Data Protection Impact Assessment before starting the processing where required.

4.9 Complaints to the PDPC

Please contact us first so we can try to resolve your concern quickly. If you believe your Tanzania data protection rights have been infringed or you are dissatisfied with our decision, you may contact or lodge a complaint with the Tanzania Personal Data Protection Commission. Current public contact details listed by the PDPC include: Personal Data Protection Commission, P.O. Box 1105, 1 Moshi Street, Viwandani, 41102 Dodoma, Tanzania; email helpdesk@pdpc.go.tz or dg@pdpc.go.tz . Please verify current contact details on the official PDPC website before filing.

5. How information is shared

We do not sell personal and sensitive user data. We may share information as described below.

Recipient | What may be shared | Why

Other users | Public listings, seller/dealer profile details, listing location, contact options, messages, reviews, and information you choose to make visible. | To enable vehicle discovery, marketplace communication, and transactions between users.

Service providers | Account, device, usage, listing, payment-status, support, messaging, hosting, analytics, crash, security, and communication data. | To operate, secure, analyze, and support the Service.

Payment providers and app stores | Payment status, receipts, plan details, billing identifiers, refunds, and transaction records. | To process payments, subscriptions, purchases, refunds, and fraud checks.

Maps, location, and vehicle-data providers | Location, search, listing, and vehicle-related data necessary for the feature. | To provide maps, directions, nearby listings, and vehicle information.

Advertising and analytics partners | Device, usage, event, and advertising data, only as permitted by law and platform rules. | To measure app performance, improve the Service, and, if enabled, provide or measure advertising.

Authorities, courts, safety partners, and legal advisers | Information relevant to a lawful request, safety issue, fraud case, dispute, or legal obligation. | To comply with law, protect rights, prevent harm, and enforce our Terms.

Business transfer parties | Relevant account, listing, transaction, and operational data. | For a merger, acquisition, financing, restructuring, asset sale, or similar business transaction.

6. Public listings and user content

Vehicle listings, public seller profiles, photos, descriptions, prices, city/location, dealership information, and other content you post publicly may be visible to other users, search engines, and third-party websites or services. Do not include personal information in public listing descriptions or photos unless you want it to be public and you have the legal right to post it.

7. Third-party SDKs, services, and links

The Service may use third-party SDKs and services for hosting, analytics, crash reporting, messaging, maps, payments, authentication, notifications, advertising, fraud prevention, and support. These third parties process information according to their own terms and privacy policies. Before publishing this Policy, update this section with the actual SDKs and providers used by the app, for example: [Firebase Analytics] , [Firebase Crashlytics] , [Google Maps] , [Apple Sign in] , [payment provider] , [SMS provider] , [email provider] , and [advertising network, if any] .

Our Service may contain links to third-party websites or services, including sellers, dealers, payment providers, inspection providers, financing providers, insurance providers, or map providers. We are not responsible for third-party privacy practices.

8. Advertising, analytics, and tracking choices

– We may use analytics and diagnostics tools to understand app performance and improve the Service.

– If we use advertising or measurement partners, we will disclose this in the app-store privacy forms and comply with platform requirements.

– On iOS, if the app tracks you across apps or websites owned by other companies, we will request permission through Apple’s App Tracking Transparency prompt before tracking.

– On Android, you may reset or delete your advertising ID or manage ad personalization in your device settings where available.

– You may opt out of marketing emails by using the unsubscribe link or contacting us. Service, safety, and account messages may still be sent.

9. Your privacy choices and permissions

– Account information: You can view and update certain account details in the app or by contacting support.

– Location: You can enable or disable location permission in your device settings. Some map or nearby features may not work without location access.

– Camera, photos, and files: You can manage these permissions in your device settings. If permission is denied, you may not be able to upload listing photos or attachments.

– Notifications: You can manage push notifications in the app or device settings.

– Cookies and similar technologies: Website users can manage cookies through browser settings, where available.

– Reports and safety: You can report listings, users, messages, or content through in-app reporting tools or by contacting us.

10. Account deletion and data deletion

If Juba Car allows users to create accounts in the app, you can request deletion of your account and associated personal data from inside the app and outside the app.

– In-app: Go to Settings > Account > Delete Account or Profile > Settings > Delete Account and follow the instructions.

– Web: Visit https://jubacar.com/account-deletion .

– Email: Contact info@jubacar.com from the email or phone number connected to your account.

When you request deletion, we will delete or anonymize your account and personal data unless we need to retain certain information for legitimate reasons, such as completing transactions, processing refunds, preventing fraud or abuse, resolving disputes, enforcing our Terms, maintaining security, complying with legal, tax, accounting, or regulatory obligations, or preserving evidence of safety issues. Public listings may be removed or anonymized, but copies may remain temporarily in backups, logs, or records retained for the purposes described above.

11. Data retention

We keep information only as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Where Tanzania law applies, we also consider whether the retention period is needed for the data subject to have a reasonable opportunity to access the data and for the lawful purpose for which it was collected. When personal data is no longer needed, we delete, anonymize, block, or securely dispose of it according to our retention schedule, backup cycle, and legal obligations. Typical retention periods include:

– Account data: while your account is active and for a reasonable period after closure for security, fraud prevention, disputes, and legal compliance.

– Listings and marketplace content: while listings are active and for a reasonable period after removal to prevent fraud, support users, and keep transaction history.

– Messages, reports, and support records: for the period needed to provide support, enforce rules, investigate abuse, and protect users.

– Payment and tax records: for the legally required period.

– Security logs, diagnostics, and backups: for limited periods based on security, operational, and backup schedules.

12. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, unlawful processing, disclosure, alteration, negligent loss, misuse, destruction, or damage. These safeguards may include encryption, access controls, authentication, logging, monitoring, vulnerability management, secure backup controls, staff and contractor access limitations, processor contracts, and internal privacy training. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If a personal-data breach occurs, we will investigate, take containment and remediation steps, and notify regulators or affected users where required by law, including the PDPC where Tanzania law applies.

13. International transfers

Your information may be processed in countries other than where you live, including countries that may have different data-protection laws. Where required, we use appropriate safeguards for international transfers, such as contractual protections, security measures, consent where applicable, necessity assessments, and regulator authorization or permits where required. For Tanzania users, we will not transfer personal data outside Tanzania contrary to the Personal Data Protection Act, applicable regulations, or PDPC requirements.

14. Children’s privacy

The Service is intended for users who are at least 18 years old or the age of legal majority required to buy, sell, or transact for vehicles in their jurisdiction. The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate action.

15. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, export, port, restrict, suspend, object to, or withdraw consent for processing of your personal information. You may also have rights to opt out of sale, sharing, targeted advertising, direct marketing, or certain automated decisions where applicable. Tanzania users should also review the Tanzania PDPA section above. To exercise rights, contact info@jubacar.com or use the in-app privacy tools. We may need to verify your identity before fulfilling a request.

16. Do Not Sell or Share

We do not sell personal and sensitive user data for money. If applicable law defines certain advertising, analytics, or cross-context behavioral advertising as a “sale” or “sharing,” you may opt out by using https://jubacar.com/privacy-choices or contacting info@jubacar.com . Update this section before publishing if Juba Car uses advertising networks, data brokers, or tracking technologies.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and, where appropriate, notify you in the app, by email, or through another reasonable method. Your continued use of the Service after the updated Policy becomes effective means you acknowledge the updated Policy.

18. Contact us

If you have questions, requests, complaints, or privacy concerns, contact us:

– App: Juba Car

– Developer / company: Junubia Host co LTD

– Email: info@jubacar.com

– Support email: info@jubacar.com

– Address:

5th floor, Mpakani Centre Building ,8 Sam Nujoma Rd, Mwenge (Kinondoni), Dar Es Salaam