UPI Rwanda, operated by MapMind Lab, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our land information platform.
By using UPI Rwanda, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Service.
UPI Rwanda complies with the Law No 058/2021 of 13/10/2021 relating to the protection of personal data and privacy (Data Protection and Privacy Law) of the Government of Rwanda. The law protects personal data and ensures the privacy of individuals.
In line with this law, we do not display personal details of individuals in UPI search results. In particular, ownership information linked to a UPI is only shown when it relates to government or company ownership; we do not expose names, identity details, or other personal data of individual (natural person) owners. This ensures that land information is provided in a way that respects data protection and privacy in Rwanda.
For more on the law and the role of the supervisory authority, see RISA – Data Protection and Privacy Law.
When you use our Service to search for land information, we process the search query you submit (for example, a UPI number). We use this information to fetch and display search results.
If you use the "Recent Searches" feature, we store a small history of your successful searches on your device (in your browser's local storage) to power suggestions. You can remove individual items from history in the UI and you can clear it by clearing your browser storage.
When you access the Service, certain information may be collected automatically by us or by third parties we use to provide the Service (for example, your IP address and basic request information).
We use the information we collect to:
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
We may share information with third-party service providers who perform services on our behalf, such as hosting, data analysis, and technical support.
When you perform a search, your query is sent to our search API endpoint (currently hosted at api.upi.rw) to retrieve results. Our API data is encrypted and access is restricted to authorized use only; the API is intended to be used solely through this official website (upi.rw). When maps are displayed, your browser loads Google Maps resources from Google. These providers may receive your IP address and request information as part of providing their services.
We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, government agencies).
If MapMind Lab is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. We encrypt our data so that only authorized systems can access our API; the API is only allowed to be accessed through this official website (upi.rw). Our measures include:
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
We use browser storage and caching to improve your experience. This may include local storage (for example, for recent searches and a pseudonymous visitor identifier) and a service worker cache (as part of our Progressive Web App functionality) to improve load performance.
You can clear local storage and cached data using your browser settings. Disabling storage or service worker features may limit some functionality or performance.
Our Service may contain links to third-party websites and services (such as the Kubaka Portal) and may load third-party resources (such as Google Maps). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before using their services.
We retain information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Local storage data (such as recent searches and visitorId) remains on your device until you remove it. Server-side logs (if any) may be retained for security, abuse prevention, and operational purposes.
Depending on your location, you may have certain rights regarding your personal information, including:
To exercise these rights, please contact us using the information provided below.
Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically for any changes.
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: