Privacy policy

Last updated 24 September 2026

digura is a platform, based in Kigali, Rwanda, for selling digital titles — PDFs, audio and video. We work with content partners — creators and publishers — who supply the titles, and we share the royalties from every sale with them. digura takes the payment and delivers the content. This page explains what personal data we collect, why, who we share it with, and your rights under Rwanda's Law N° 058/2021 on the protection of personal data and privacy.

What we collect

Account details: your name, email address and/or phone number, and your Google account email if you sign in with Google.
Purchases and payments: what you bought, when, the amount, and the Mobile Money number used to pay. We never see or store your Mobile Money PIN or card details.
Access to your purchases: when you view or download content you bought, so we can deliver it and prevent abuse.
Usage and device data: pages and products viewed, the page that linked you to us (including campaign tags in the link), your IP address, and a cookie that recognises your browser between visits.
Support messages: what you write to us in the support chat.
Content partners additionally: business and payout details needed to pay your royalties.

Why we use it

To create your account, sign you in, and deliver what you bought.
To process payments and pay content partners their royalties.
To send messages about your account and purchases by SMS or email (for example sign-in codes and "your purchase is ready").
To answer support requests.
To understand how digura is used and improve it, and to detect fraud.
To keep the accounting records the law requires.

We do not sell your personal data.

Who we share it with

Only with the service providers that run parts of digura for us, and only what each needs:

Payment processors — to take Mobile Money and card payments.
Messaging providers — to send SMS and email.
Hosting and cloud storage providers — to run digura and store and deliver files.
Google — only if you choose to sign in with Google.

Content partners see the sales of their own titles. They do not receive your payment details.

We may also disclose data when Rwandan law requires it.

How long we keep it

We keep your account data while your account exists. Purchase and payment records are kept as long as accounting and tax law requires, even after an account is closed. Usage data is kept to understand trends and is deleted or anonymised when no longer needed.

Your rights

You can ask us to show you the personal data we hold about you, correct it, delete it, or stop using it for a purpose, and you can object to marketing messages at any time (reply STOP to an SMS). Some records, like completed payments, must be kept by law. You can also complain to Rwanda's National Cyber Security Authority (NCSA).

Contact

Use the support chat on digura.rw, or email patrickuwonkunda@gmail.com.