Privacy Policy

MyUNATU is the official mobile app of the Uganda National Teachers' Union (UNATU), serving union members and education professionals. This comprehensive Privacy Policy outlines our commitment to protecting your personal information and explains how we collect, use, secure, and respect your data.

Your privacy is fundamental to our mission. This policy applies to the MyUNATU mobile app on all platforms where it is distributed, and to the UNATU services the app connects to.

Personal Information

We collect personal information to provide you with exceptional service and personalized professional development experiences:

• Account Information: Full name, email address, phone number, and unique user identifier
• Professional Profile: Gender, IPPS number, educational sector, branch affiliation, department, and sub-county
• Authentication Data: Secure login credentials and, where enabled, two-factor verification codes
• Event Participation: Registration records, attendance tracking, feedback submissions, and completion certificates
• Communication Preferences: Notification settings and preferred communication channels

Technical Information

• Device Information: Device type, operating system version, app version, and device identifiers
• Usage Analytics: App features accessed, session duration, navigation patterns, and performance metrics
• Network Information: IP address, connection type, and network provider

Device Permissions

MyUNATU asks for the permissions below. Each is requested only at the moment you use the feature that needs it, and you may decline or later revoke any of them in your device settings while continuing to use the rest of the app:

• Camera: to take a profile photo, and to scan QR codes for event check-in and election eligibility. The camera is never used in the background and we do not record video.
• Photo Library (read): to let you choose an existing picture as your profile photo or attach an image. We access only the items you pick.
• Photo Library (add): to save an image to your device when you choose to download or share one from the app.

Interactive Content

• Communication Data: Chat messages, discussion forum posts, and peer interactions
• Feedback & Surveys: Event evaluations, app feedback, and survey responses
• Learning Progress: Course completion status, quiz results, and skill assessments

Core Service Delivery

• Account Management: Create and maintain your secure user account
• Event Services: Process registrations, manage attendance, and facilitate networking
• Authentication: Verify your identity and maintain account security
• Professional Development: Track learning progress, issue certificates, and recommend relevant content
• Personalization: Customize your app experience based on preferences and professional interests

Communication & Engagement

• Event Notifications: Send timely updates about upcoming events, schedule changes, and important announcements
• Professional Updates: Share relevant industry news, policy updates, and union communications
• Community Building: Facilitate connections between members and enable professional networking
• Support Services: Provide technical assistance and respond to your inquiries

Analytics & Improvement

• Service Enhancement: Analyze usage patterns to improve app functionality and user experience
• Content Optimization: Understand which professional development topics are most valuable to members
• Performance Monitoring: Ensure app stability, security, and optimal performance
• Research & Development: Inform future features and service improvements

Authorized Sharing

We may share your information in the following specific circumstances:

• With Your Consent: When you explicitly authorize us to share specific information
• Event Coordination: Basic attendance data with event organizers for planning and certificate issuance
• Union Leadership: Aggregated professional development statistics for strategic planning (no individual identification)
• Service Providers: Trusted partners who help us operate the app (subject to strict confidentiality agreements)
• Legal Compliance: When required by law, court order, or to protect our legal rights

What We Never Share

• Personal Contact Information: Your email, phone number, or address without explicit consent
• Private Communications: Chat messages, private feedback, or personal discussions
• Financial Data: We don't collect or store payment information
• Sensitive Professional Data: Detailed performance assessments or confidential evaluations
• Marketing Lists: We never sell or rent your information to third parties for marketing purposes

Technical Safeguards

• Encryption: End-to-end encryption for data transmission and AES-256 encryption for data storage
• Access Controls: Multi-layered authentication systems and role-based access permissions
• Network Security: Firewalls, intrusion detection systems, and regular security monitoring
• Data Backup: Secure, encrypted backups with geographically distributed storage
• Vulnerability Management: Regular security assessments and immediate patch deployment

Operational Security

• Staff Training: Regular security awareness training for all personnel
• Access Logging: Comprehensive audit trails of all data access and modifications
• Incident Response: 24/7 security monitoring and rapid incident response procedures
• Third-party Audits: Annual security assessments by independent cybersecurity firms

Your Security Role

Security is a shared responsibility. Please help protect your account by:

• Using a strong, unique password for your MyUNATU account
• Enabling two-factor verification on your MyUNATU account
• Logging out of the app when using shared or public devices
• Keeping your app updated to the latest version
• Reporting any suspicious activity or security concerns immediately

We retain your information only as long as necessary to fulfill the purposes for which it was collected:

Retention Periods

• Active Account Data: Maintained throughout your membership and for 3 years after account deactivation
• Professional Development Records: Preserved for 7 years to support career verification and continuing education requirements
• Event Participation Data: Kept for 5 years for certificate validation and professional portfolio purposes
• Communication Records: Retained for 2 years for service quality and dispute resolution
• Technical Logs: Stored for 1 year for security monitoring and system optimization
• Analytics Data: Aggregated and anonymized after 6 months, with anonymized insights retained indefinitely

Data Deletion Process

Deleting your account yourself: You can permanently delete your MyUNATU account at any time from inside the app. Open Profile and tap Delete account. You will be asked to confirm, after which your account and its associated personal data are removed. You do not need to email or call us to do this.

When retention periods expire or upon your request, we:

• Securely delete personal information from active systems
• Remove data from backup systems within 90 days
• Ensure anonymization of any retained statistical data
• Provide confirmation of deletion upon request

As a MyUNATU user, you have comprehensive rights regarding your personal information:

Fundamental Rights

• Right to Access: Request a complete copy of your personal information in a readable format
• Right to Rectification: Correct inaccurate or incomplete personal information
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Portability: Export your data in a machine-readable format for transfer to other services
• Right to Object: Object to certain types of data processing, including direct marketing
• Right to Restrict Processing: Limit how we use your data while disputes are resolved

Consent Management

• Withdrawal of Consent: Revoke previously given consent at any time
• Granular Controls: Manage specific types of data processing and communication preferences
• Notification Settings: Customize which communications you receive and how

How to Exercise Your Rights

You can exercise these rights through multiple channels:

• In the App (fastest): Open Profile and tap Delete account to erase your account and personal data yourself
• Email Request: Contact our Data Protection Officer at communications@unatu.org
• Written Request: Submit a formal request to our physical address
• Phone Support: Call our dedicated privacy hotline during business hours

Children's Privacy

MyUNATU is designed exclusively for professional educators and union members who are 18 years or older. We do not knowingly collect, use, or disclose personal information from individuals under 18. If we discover that we have inadvertently collected such information, we will delete it immediately.

International Data Transfers

Your information is primarily stored and processed within Uganda. When we use international service providers, we ensure:

• Adequate data protection levels through contractual safeguards
• Compliance with applicable international data transfer regulations
• Regular audits of international partners' privacy practices
• Immediate notification if transfer arrangements change

Sensitive Information

We recognize that some professional information may be sensitive. We apply enhanced protections to:

• Performance evaluations and professional assessments
• Health and accommodation information (if voluntarily provided)
• Union membership activities and participation records
• Professional disputes or grievance information

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or service improvements. We are committed to transparent communication about any changes.

Types of Updates

• Minor Changes: Clarifications, contact information updates, or administrative modifications
• Material Changes: Significant alterations to data collection, use, or sharing practices
• Legal Updates: Changes required by new laws or regulations

Notification Methods

• In-App Notifications: Prominent alerts when you open the app
• Email Notifications: Direct communication to your registered email address
• Website Posting: Updated policy published on our official website
• Push Notifications: Important updates delivered to your device

Your Options

When we make material changes, you can:

• Accept the updated policy and continue using our services
• Contact us with questions or concerns about the changes
• Exercise your right to delete your account and data
• Request specific accommodations if you disagree with certain changes