Last updated: August 2026
Here's how TUKOLE protects your account, your payments, and your identity documents.
Accounts are handled by Supabase, an industry-standard authentication provider. Your password is never stored in plain text, and all traffic between your device and TUKOLE is encrypted (HTTPS).
Payments for verification are processed by Pesapal, a licensed payment provider regulated to operate in Uganda. When you pay with MTN Mobile Money, Airtel Money, or a card, you enter your PIN or card details directly on Pesapal's own secure payment page - TUKOLE never sees or stores that information.
If you apply for a verified badge, your ID document is uploaded to a private storage location that isn't publicly accessible or browsable. It's only reviewed in connection with your verification, or a safety report involving your account. Full details on how long it's kept and why are in our Privacy Policy.
A verified badge means that person's government-issued ID was submitted and matched at the time they applied for verification. It's a signal of identity confirmation, not a guarantee of someone's character or the quality of their work - use your own judgment in any arrangement, verified or not.
If another user has harmed you, threatened you, or behaved in a way that concerns you, contact us right away. If the person is verified, we retain their submitted ID specifically to support a report like this - see our Privacy Policy for details.
If you've found a genuine security vulnerability in TUKOLE, please report it to us directly at the contact above rather than exploiting or publicizing it. We take these reports seriously and will respond promptly.