Privacy Policy

When you submit a Rating for a practitioner, we collect:

• the star rating (1–5) you select;
• any written comment you choose to add;
• a display name, if you choose to provide one (this field is optional — if left blank, your Rating is shown publicly as "Anonymous"); and
• which practitioner profile the Rating is attached to, and the time it was submitted.

A Rating and any name or comment you include with it are displayed publicly on the practitioner's profile page as soon as it is submitted. Do not include your real name, contact details, or anything else you do not want to be public, unless you intend for it to be public.

We do not currently offer user accounts, so we do not collect passwords or require you to register to submit a Rating.

Like most websites, our hosting and analytics providers automatically log certain technical information when you visit, including your IP address, browser and device type, pages viewed, referring page, and timestamps. We use Google Analytics to understand how the Service is used (for example, which pages are visited and how often), which sets cookies and collects usage data in your browser on our behalf. Our hosting provider, Cloudflare, also processes connection-level data (such as IP address) as part of delivering the site and protecting it from abuse.

The Service uses cookies set by Google Analytics to distinguish users and sessions for analytics purposes, and a local storage entry on your device to remember your light/dark theme preference (this is not a cookie and is not transmitted to us). We do not use cookies for advertising or to build a profile of you for marketing purposes. You can block or delete cookies in your browser settings; doing so may affect analytics but will not prevent you from browsing the Service or submitting a Rating.

We use the information described above to:

• display Ratings publicly on the relevant practitioner's profile;
• calculate aggregate figures such as average rating and rating counts;
• operate, maintain, secure, and improve the Service;
• understand aggregate usage patterns through analytics;
• detect, investigate, and prevent abuse, spam, or violations of our Terms of Use; and
• comply with legal obligations and respond to lawful requests.

Ratings, comments, and any display name you provide are public by design and visible to anyone who views the relevant profile page — this is the core function of the Service, not a disclosure to a third party in the ordinary sense.

Beyond that, we share information with:

• Supabase, which hosts our database and stores Ratings and the licensing registry;
• Cloudflare, which hosts the Service and provides content delivery and security filtering; and
• Google Analytics, which processes usage data as described in Section 2.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes. We may disclose information if required by law, court order, or a valid legal request, or where necessary to protect the rights, property, or safety of Rate My Musawo, our users, or the public.

Ratings and comments are retained for as long as the associated practitioner profile remains on the Service, since they form part of the public record the Service exists to provide, unless removed under our Terms of Use or at your request as described in Section 8. Analytics data is retained according to Google Analytics' standard retention settings.

We take reasonable technical measures to protect information on the Service, including transport encryption (HTTPS) and access controls on our database. No method of transmission or storage is completely secure, and we cannot guarantee absolute security of any information you submit.

If you submitted a Rating and want it corrected or removed — for example because it contains information you did not intend to make public — contact us at the details in Section 11 with enough detail to locate it (practitioner profile URL, approximate date, and content). Because Ratings are not linked to an account, we cannot verify that a removal request comes from the original submitter and may ask for reasonable supporting detail before acting on it.

If you are in Uganda, the Data Protection and Privacy Act, 2019 gives you rights including the right to access information held about you, request correction, and object to certain processing; if you are located elsewhere, you may have similar rights under your local law. Contact us to make a request and we will respond as required by applicable law.

The Service is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has submitted information to us, contact us and we will remove it.

Our infrastructure providers (Supabase, Cloudflare, Google Analytics) may process and store data on servers located outside Uganda. By using the Service, you understand that your information may be transferred to and processed in countries with data protection laws that differ from those in your own country.

Questions about this Privacy Policy, or requests relating to your information, can be sent via our contact form.

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision. Material changes will be reflected on this page; continued use of the Service after a change constitutes acceptance of the updated policy.