Privacy Policy

Version 1.5

Last updated: 27 October 2026

Introduction

Welcome to My Digital Diary. At My Digital Diary, we respect your privacy and recognise that the information you record in a personal diary can be highly confidential. Your diary may contain details about your daily activities, financial circumstances, health, relationships, spiritual life, personal goals, education, and professional activities. We are committed to handling your personal information responsibly, transparently, securely, and in accordance with applicable data protection laws. This Privacy Policy explains:

What personal information we collect and process.
Why and how we use your information.
How we handle sensitive personal information.
How artificial intelligence (AI) features process information.
When information may be shared with service providers.
How we handle international data transfers.
How long information is retained.
How you can access, correct, export, or delete your information.
Your rights under applicable data protection laws.
How to contact us regarding privacy concerns.

This Privacy Policy is intended to reflect applicable requirements of Uganda's Data Protection and Privacy Act, 2019, and the Data Protection and Privacy Regulations, 2021, as well as relevant international data protection requirements where they apply. By using My Digital Diary, you acknowledge that you have been provided with this Privacy Policy. Where the law requires your consent for a particular processing activity, we will seek that consent separately. Using the application does not automatically constitute consent to every form of personal data processing described in this Policy.

1. Who We Are

My Digital Diary is a digital personal organisation and life-management platform designed to help individuals plan, record, monitor, and manage different aspects of their lives. For personal information that we determine how and why to process, the entity operating My Digital Diary acts as the data controller. We are responsible for determining the purposes and means of processing that information and complying with applicable data protection obligations. Application: My Digital Diary Website: https://my-digital-diary.com Privacy Email: info@my-digital-diary.com Telephone: +256 784 675 790 WhatsApp: +256 704 145 972 Our full legal operating entity, registered business address, and applicable data protection registration details will be provided where legally required.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed through:

The My Digital Diary website.
The My Digital Diary application.
User accounts and associated dashboards.
Planning, diary, reporting, and productivity features.
Financial and wellbeing tracking features.
AI-powered planning and insights.
Connected third-party services.
Customer support communications.
Related services operated by My Digital Diary.

This Policy does not replace the privacy policies of independently operated third-party platforms or services. Where a connected provider processes information independently, its own privacy policy and applicable terms will govern that processing.

3. Information We Collect and Process

We collect and process different categories of information depending on how you use My Digital Diary.

3.1 Account and Identification Information

When you register or manage an account, we may process:

Your name.
Email address.
Telephone number.
Account identification details.
Authentication information.
Account preferences.
Subscription information.
Account creation and activity dates.
Information needed for account recovery.

We use this information to establish, authenticate, maintain, and protect your account.

3.2 Personal Planning and Diary Information

You may choose to record:

Daily activities and personal reflections.
Tasks, schedules, and reminders.
Annual plans and long-term goals.
Personal achievements and progress.
Habits and routines.
Private notes.
Personal development plans.
Life events and milestones.

You control the information you choose to enter, subject to applicable laws and the application's technical capabilities.

3.3 Financial Information

Depending on the features you use, we may process:

Income records.
Expense records.
Budget information.
Savings plans.
Debt and liability records.
Financial goals.
Investment planning notes.
Financial projections.
Personal financial summaries.
Business-related financial records.

We process financial records to provide the financial organisation, tracking, and reporting functionality requested by users. My Digital Diary is not a financial institution merely because it provides financial planning or tracking features. Information generated by the application should not be treated as professional investment, tax, accounting, or financial advice.

3.4 Health and Wellbeing Information

You may choose to record:

Diet and nutrition information.
Exercise and physical activities.
Sleep patterns.
Personal health goals.
Medical check-up notes.
Wellbeing activities.
Health-related appointments.
Other health information you voluntarily enter.

Health information may qualify as sensitive or special-category personal data under applicable laws. We will process such information only where an appropriate legal basis and any additional protections required by applicable law are satisfied. Where explicit consent is required, we will seek it before carrying out the relevant processing. My Digital Diary is not a medical service, and its wellbeing tools do not replace professional medical assessment, diagnosis, or treatment.

3.5 Education, Projects, and Professional Information

You may record:

Educational plans.
Learning objectives.
Academic progress.
Projects and milestones.
Professional development activities.
Meetings and appointments.
Meeting notes and recordings.
Business plans.
Work-related activities.
Professional contacts.

3.6 Relationships, Contacts, and Spiritual Information

You may choose to store:

Personal relationship notes.
Contact details.
Business card information.
Networking records.
Family-related notes.
Spiritual goals and reflections.
Religious activities.
Personal beliefs.
Other private reflections.

Information concerning religious beliefs, intimate relationships, or other sensitive aspects of a person's life may require enhanced legal and technical protections. We encourage you to respect the privacy of other people whose information you enter into the application.

3.7 Documents, Recordings, and Signatures

Where supported, you may upload or create:

Personal documents.
Business documents.
Images and attachments.
Meeting recordings.
Digital or electronic signatures.
Reports.
Other files associated with your account.

Documents may contain additional personal information about you or other individuals. We process uploaded material to provide the storage, retrieval, organisation, and other functions requested through the application.

3.8 Technical and Usage Information

When you access My Digital Diary, we may process technical information necessary to operate, troubleshoot, and secure the service. Depending on our systems, this may include:

IP address.
Browser type.
Device information.
Operating system.
Login timestamps.
Security-related events.
Application error information.
Feature usage and diagnostic information.
Session information.

3.9 Customer Support Information

When you contact our support team, we may process:

Your name and contact details.
Your support request.
Relevant account information.
Messages and correspondence.
Attachments you provide.
Information necessary to investigate and resolve the issue.

We ask users not to send sensitive diary contents, passwords, or API credentials to support unless a secure, authorised process specifically requires them.

4. Principles Governing Personal Data Processing

My Digital Diary is committed to following applicable personal data protection principles.

Lawfulness and fairness: We process personal information only where there is an appropriate legal basis.
Transparency: We aim to explain clearly what information is collected and how it is used.
Purpose limitation: Personal information should be collected for specific, legitimate purposes and not reused for incompatible purposes without an appropriate legal basis.
Data minimisation: We aim to process only the information reasonably necessary for the relevant purpose.
Accuracy: We provide supported methods for users to review and update their information.
Storage limitation: Personal information should not be retained longer than necessary, subject to lawful retention requirements.
Security and confidentiality: We implement and maintain appropriate measures to reduce risks of unauthorised access, disclosure, alteration, loss, or destruction.
Accountability: We seek to document and demonstrate compliance with applicable data protection obligations.

5. Legal Grounds for Processing Information

We process personal information only where permitted under applicable law. The appropriate legal basis depends on the information, the processing activity, and the jurisdiction.

5.1 Performance of a Contract

Processing may be necessary to provide services requested by users, including:

Creating and maintaining accounts.
Saving and displaying diary entries.
Managing tasks and reminders.
Generating requested reports.
Delivering subscribed features.

5.2 Consent

We may rely on your consent where legally appropriate, particularly for optional processing involving sensitive information, certain AI features, marketing communications, or other activities requiring consent. Where processing is based on consent, you may withdraw that consent through available settings or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5.3 Legitimate Interests

Where permitted by applicable law, we may process information for legitimate interests such as:

Preventing fraud.
Protecting account security.
Detecting technical problems.
Maintaining service reliability.
Protecting users from misuse.
Improving necessary operational processes.

We will assess whether such interests are overridden by individuals' rights and freedoms.

5.4 Legal Obligations

We may process or retain information where necessary to comply with applicable legal requirements, including lawful record-keeping, regulatory obligations, and valid legal requests.

5.5 Protection of Vital Interests

In exceptional circumstances recognised by applicable law, processing may be necessary to protect someone's life or other vital interests. Ugandan data protection requirements: Where Ugandan law requires prior consent or provides a particular lawful exception, we will apply those requirements. A legal basis recognised in another jurisdiction will not automatically replace a consent requirement under Ugandan law.

6. How We Use Your Information

We use personal information to provide, maintain, secure, and improve the services requested by users. This includes:

Displaying personalised dashboards.
Managing daily plans, tasks, and reminders.
Recording personal diary entries.
Monitoring goals and achievements.
Preparing budget and financial summaries.
Tracking savings, expenses, and financial targets.
Supporting health and wellbeing tracking.
Managing projects and education plans.
Organising meetings and appointments.
Creating charts and progress reports.
Generating selected personal insights.
Producing requested reports and exports.
Providing account notifications.
Managing subscriptions.
Responding to customer support requests.
Securing accounts and preventing misuse.
Maintaining application reliability.

We do not sell your personal information. We do not use private diary entries, health records, financial records, or personal reflections for third-party behavioural advertising. If we introduce a new purpose that materially changes how personal information is processed, we will provide appropriate notice and obtain additional consent where required.

7. Sensitive and Confidential Information

My Digital Diary recognises that personal diary records may include highly sensitive information. Examples include:

Medical and health information.
Financial circumstances.
Religious or philosophical beliefs.
Intimate personal relationships.
Sensitive family matters.
Signatures and identity-related documents.
Confidential business information.

We seek to apply additional protections where the nature of the information or applicable law requires them. These protections may include:

Restricting access to authorised persons and systems.
Limiting processing to defined purposes.
Applying appropriate encryption and access controls.
Requiring explicit consent where legally necessary.
Limiting disclosure to third parties.
Assessing privacy and security risks.
Restricting unnecessary use in AI processing.

We do not consider the voluntary entry of sensitive information to be unrestricted permission to use it for unrelated purposes. You should avoid entering information that is unnecessary for the features you intend to use.

8. Artificial Intelligence and Automated Features

My Digital Diary may offer AI-powered functionality, including:

AI Planner.
Personalised planning recommendations.
Productivity insights.
Goal analysis.
Financial planning assistance.
Activity summaries.
Wellbeing insights.
Other supported AI-generated features.

8.1 How AI Features Work

When you intentionally use an AI-powered feature, relevant information may be processed to generate the response you requested. Depending on the feature, this may include:

Plans and tasks.
Upcoming activities.
Goals and progress records.
Financial summaries.
Recent diary activities.
Selected productivity information.
Health or wellbeing information where relevant and lawfully permitted.

We aim to limit AI processing to information reasonably necessary for the particular feature. We do not intend to disclose your complete diary history to an AI provider when a limited summary or selected records are sufficient.

8.2 AI Service Providers

AI-powered features may rely on third-party AI providers, including OpenAI, Anthropic, or other supported services. Where an external AI provider processes information, that processing is subject to applicable contractual arrangements, privacy protections, and service terms. Before sensitive personal information is transferred to an external AI provider, we will establish the required legal basis and provide the necessary transparency and consent controls.

8.3 User-Provided API Credentials

Some AI features may allow users to connect their own API credentials. When you provide credentials for a supported provider:

The credentials are used to authenticate authorised requests.
Requests may be processed under your account with that provider.
The provider may impose separate terms, privacy practices, usage restrictions, and charges.
You are responsible for managing your external provider account.
You should review the provider's applicable data-processing arrangements.

We will handle stored credentials using appropriate security measures and limit their use to authorised purposes.

8.4 AI Data Protection

We will not intentionally use your private diary records to train our own general-purpose AI models without a lawful basis and any consent required by applicable law. Any use of personal information by an external AI provider for model improvement, retention, monitoring, or training must be assessed against that provider's applicable terms and our contractual arrangements. Where provider settings allow, we will seek to limit unnecessary retention and secondary use of personal data.

8.5 Accuracy and Limitations

AI-generated information may be incomplete, inaccurate, or unsuitable for a particular situation. AI outputs are provided for informational, organisational, and planning purposes. They do not constitute:

Professional medical advice.
Financial or investment advice.
Legal advice.
Psychological diagnosis.
Tax or accounting advice.
Other regulated professional advice.

Users should independently verify important information and consult qualified professionals when necessary.

8.6 Automated Decision-Making

My Digital Diary's AI planning and recommendation features are intended to assist users. Where applicable law provides rights relating to decisions based solely on automated processing that produce legal or similarly significant effects, we will comply with those requirements, including applicable rights to information, objection, and human intervention.

9. Third-Party Services and Integrations

My Digital Diary may allow users to connect external services, such as:

Calendar applications.
Email or notification services.
AI providers.
Cloud storage services.
Other supported productivity platforms.

When you authorise a connection, we process the information necessary to provide the requested integration. For example, a connected calendar may allow the application to display relevant meetings or scheduled activities. We will seek to limit integration access to the permissions reasonably required for the feature. Where supported, you may disconnect a service through your account settings. Disconnecting a service prevents further access through that connection, subject to technical limitations. It does not necessarily delete information previously processed by the external provider. External providers maintain their own privacy policies and data-processing practices.

10. Sharing and Disclosure of Personal Information

We do not sell personal information. We may share limited personal information in the following circumstances.

10.1 Service Providers

We may engage authorised service providers to support:

Website and application hosting.
Cloud infrastructure.
Database management.
Data backups.
Email delivery.
Notifications.
Customer support.
Payment and subscription processing.
AI functionality.
Security and technical maintenance.

Where service providers process personal information on our behalf, we will seek appropriate contractual, confidentiality, security, and data protection commitments.

10.2 Connected Services

We may disclose information to external services that you choose to connect or use. The scope of disclosure depends on the feature and the permissions granted.

10.3 Legal Requirements

We may disclose information where required or permitted by applicable law, such as in response to a valid court order or other legally binding request. We will assess such requests and disclose only information legally required or otherwise lawfully permitted.

10.4 Protection of Rights and Safety

Where legally permitted, limited information may be processed or disclosed to investigate security incidents, prevent fraud, protect users, or defend lawful rights.

10.5 Business Restructuring

If My Digital Diary undergoes a merger, acquisition, reorganisation, or transfer of business assets, personal information may be involved in the transaction. Any such processing will be subject to applicable confidentiality, transparency, and data protection obligations.

11. International Data Transfers

My Digital Diary may rely on service providers operating in countries outside Uganda. For example, data may be processed internationally through cloud hosting, AI, email delivery, support, or backup services. We recognise that international transfers of personal information are subject to specific legal requirements. Where Ugandan data protection law applies, we will assess whether a proposed international transfer meets the applicable requirements, including appropriate protection of personal information and consent where required. Where the EU GDPR, UK GDPR, or another applicable law governs a transfer, we will use a legally recognised transfer mechanism where necessary. Such mechanisms may include:

Transfers to jurisdictions recognised as providing adequate protection.
Appropriate contractual safeguards.
Standard contractual clauses where applicable.
Other lawful mechanisms recognised by the relevant legislation.

We will consider the sensitivity of the information, the destination country, the receiving organisation, and the safeguards available. Users may contact us to request further information about relevant international transfers and the safeguards applied to their personal information.

12. Notifications and Reminders

If you enable the relevant features, My Digital Diary may send:

Task reminders.
Meeting notifications.
Daily planning summaries.
End-of-day summaries.
Subscription notifications.
Goal progress updates.
Financial planning reminders.
Productivity and wellbeing tips.
Important account and security notices.

Notifications may be delivered through supported channels such as email, in-app notifications, or device notifications. You can manage supported optional notification preferences through your account settings. Where marketing communications require consent, we will request the necessary consent and provide an appropriate withdrawal or unsubscribe mechanism. Essential account, security, and service-related communications may continue where legally permitted and necessary.

13. Reports and Data Exports

My Digital Diary allows users to generate reports from supported account information. Depending on the available features, you may be able to choose:

The information to include.
The reporting period.
The report type.
The purpose of the report.

Reports may include financial information, activities, goals, plans, or other selected records. Where supported, reports may be generated in PDF or another available format and delivered to your registered email address. Because reports can contain confidential information, you should protect downloaded files and ensure that your registered email account is secure. We may maintain limited records of report requests for operational, security, and troubleshooting purposes.

14. Data Storage and Backups

We maintain data storage and backup processes intended to support service availability, recovery, and protection against accidental loss. Depending on the infrastructure used, account information may be stored in application databases, secure backup systems, or authorised cloud environments. Backup access is intended to be restricted to authorised personnel and systems. Backups should be used only for legitimate purposes, including:

Disaster recovery.
Business continuity.
Restoration following technical failure.
Security incident recovery.
Maintaining system integrity.

Deleted information may remain in protected backups for a limited period before those backups are overwritten or securely removed according to the applicable retention schedule. Where backup information is restored, applicable deletion requests must continue to be respected.

15. Information Security

We recognise that personal diary information requires careful protection. My Digital Diary implements, maintains, or progressively enhances appropriate technical and organisational security measures based on the nature of the information and associated risks. Depending on the relevant system, these measures may include:

Secure account authentication.
Role-based access controls.
Encrypted data transmission.
Appropriate protection of stored information.
Restricted administrative privileges.
Secure management of credentials and secrets.
Security monitoring and activity logs.
Backup and recovery controls.
Software updates and vulnerability management.
Controlled access to production systems.
Security awareness and confidentiality requirements.

Access to personal information should be limited to personnel and service providers with an authorised need. We do not guarantee that any internet-based service is entirely free from security risks. Users are encouraged to:

Use strong, unique passwords.
Keep account credentials confidential.
Enable additional authentication protections where available.
Secure their devices.
Avoid sharing sensitive documents unnecessarily.
Report suspicious account activity promptly.

16. Personal Data Breaches

A personal data breach may involve unauthorised access, disclosure, alteration, loss, or destruction of personal information. If we become aware of a suspected breach, we will assess the incident and take appropriate steps to contain, investigate, and address it. Where required by applicable law, we will notify the relevant data protection authority and affected individuals. Notifications may explain:

The nature of the incident.
The categories of information involved.
The potential consequences.
Measures taken or proposed.
Recommended protective actions.
How affected users can contact us.

We will maintain appropriate incident response procedures and cooperate with competent authorities as required.

17. How Long We Retain Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal requirements. Retention periods depend on factors such as:

Whether your account remains active.
The purpose of the information.
Your deletion requests.
Legal and regulatory requirements.
Security and fraud-prevention needs.
Financial or contractual record-keeping obligations.
Backup and recovery schedules.
The need to resolve disputes or enforce agreements.

Active diary information is generally retained while your account remains active, unless you delete it or a different retention requirement applies. When information is no longer required, it will be deleted, anonymised, or otherwise handled in accordance with our applicable retention procedures. Where a legal obligation requires information to be retained, we will limit its continued use to the relevant lawful purpose.

18. Account Deletion

We recognise your interest in controlling the information stored in your account. You may request account deletion through available account settings or by contacting us.

18.1 Before Deletion

Where supported, we may offer you an opportunity to download or export eligible account information before deletion. We recommend reviewing any information you wish to retain before confirming an account deletion request.

18.2 Deletion Process

Under our standard account deletion process, a confirmed deletion request may initiate a 30-day deletion period. During this period:

The account is marked for deletion.
Access may be restricted or disabled.
The user may be able to cancel the request through an available recovery process.
Information remains subject to applicable security protections.

At the end of the deletion period, eligible account information is scheduled for permanent deletion from active systems. Where applicable law requires deletion within a shorter period, that requirement will take precedence.

18.3 Permanent Deletion and Exceptions

Following completion of deletion, personal diary information may no longer be recoverable. Certain limited records may be retained where legally necessary, including for:

Statutory obligations.
Financial record-keeping.
Fraud prevention.
Security investigations.
Legal claims or proceedings.

Information remaining in backup systems will be handled under the applicable backup retention and deletion procedures. We will not retain personal information indefinitely merely because it was previously associated with an account.

19. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights.

19.1 Right to Be Informed

Receive clear information about how and why your personal information is processed.

19.2 Right of Access

Request confirmation of whether we process your personal information and obtain access to information you are legally entitled to receive.

19.3 Right to Correction

Request correction or updating of inaccurate, incomplete, or outdated personal information.

19.4 Right to Deletion

Request deletion of personal information where the applicable legal requirements are satisfied.

19.5 Right to Object

Object to particular uses of your personal information where permitted by applicable law.

19.6 Right to Withdraw Consent

Withdraw consent for processing activities that rely on consent. Withdrawal will not invalidate processing lawfully completed before withdrawal.

19.7 Right to Restriction

Where applicable law provides this right, request that particular processing activities be restricted.

19.8 Right to Data Portability

Where applicable law provides this right, request eligible personal information in a structured, commonly used, machine-readable format or request its transfer where technically feasible.

19.9 Rights Concerning Automated Decisions

Exercise applicable rights relating to solely automated decisions that produce legal or similarly significant effects.

19.10 Right to Complain

Contact us or submit a complaint to the competent data protection authority where you believe your rights have been infringed. We will not unlawfully discriminate against individuals for exercising their applicable privacy rights.

20. How to Exercise Your Privacy Rights

You may exercise supported privacy controls through the Privacy & Data section of your account. Alternatively, you may contact us using the details provided at the end of this Policy. Requests may include:

Access to personal information.
Correction of records.
Personal data exports.
Withdrawal of consent.
Objections to processing.
Account deletion.
Questions about international data transfers.
Complaints about information handling.

To protect your privacy, we may need to verify your identity before responding. We will respond within applicable statutory time limits. If a request cannot be fulfilled in full, we will explain the relevant reason where legally required and identify any available alternatives or appeal mechanisms.

21. Cookies and Similar Technologies

My Digital Diary may use cookies, browser storage, or similar technologies to support website and application functionality. Depending on the technologies deployed, these may be used for:

User authentication.
Session management.
Security.
Remembering preferences.
Maintaining application functionality.
Performance monitoring.
Other disclosed purposes.

Where cookies or similar technologies are not strictly necessary and applicable law requires consent, we will seek consent before activating them. Users may be able to control certain technologies through browser settings or an available consent-management interface. Disabling essential storage technologies may affect the functionality of the service. Where analytics or other optional tracking services are used, we will provide additional information and applicable privacy choices.

22. Privacy of Children

My Digital Diary is designed primarily for individuals who are legally able to create and manage an account under applicable terms and laws. We recognise that children's personal information requires special protection. We do not knowingly seek to process children's personal information in circumstances where doing so would violate applicable law. Where parental or guardian consent is legally required, appropriate consent must be obtained before the relevant processing occurs. If we become aware that personal information relating to a child has been collected or processed without the necessary legal authority, we will take appropriate steps to address the situation, including deletion where required. Parents and guardians may contact us with concerns involving children's personal information.

23. Information About Other Individuals

Some features allow you to record information concerning other people, including:

Family members.
Friends.
Business associates.
Professional contacts.
Meeting participants.
Other individuals mentioned in personal records.

You are responsible for ensuring that information you provide about others is entered and used lawfully. You should avoid recording unnecessary sensitive information about other individuals. You must not use My Digital Diary to collect, disclose, or process another person's information unlawfully. Where you upload recordings or documents involving other individuals, you are responsible for obtaining any consent or other legal authority required for their creation and use.

24. Privacy by Design and Default

We aim to incorporate privacy considerations into the design, development, and operation of My Digital Diary. Our approach includes:

Limiting unnecessary information collection.
Applying appropriate default privacy settings.
Restricting access to sensitive information.
Evaluating risks associated with new features.
Considering data protection requirements before introducing new integrations.
Reviewing third-party service providers.
Applying additional safeguards to sensitive information.
Supporting applicable data subject rights.

Where required by law, we will conduct data protection impact assessments before introducing processing activities likely to create high risks to individuals' rights and freedoms.

25. Data Protection Governance and Regulatory Compliance

My Digital Diary is committed to complying with applicable data protection requirements. These may include:

Uganda's Data Protection and Privacy Act, 2019.
Uganda's Data Protection and Privacy Regulations, 2021.
Applicable directives and guidance issued by Uganda's Personal Data Protection Office.
The EU General Data Protection Regulation, where applicable.
The UK General Data Protection Regulation, where applicable.
Other national or regional privacy laws that apply to our processing activities.

We will assess and fulfil applicable registration, record-keeping, accountability, security, and regulatory reporting requirements. Where a particular jurisdiction grants additional privacy rights, those rights will apply to eligible individuals according to the relevant law. Nothing in this Policy is intended to limit rights that cannot lawfully be excluded.

26. Additional Information for Users in the European Economic Area and United Kingdom

Where the EU GDPR or UK GDPR applies to our processing, individuals may have additional protections under the relevant legislation. These may include rights concerning:

Access and rectification.
Erasure.
Restriction of processing.
Data portability.
Objection to processing.
Withdrawal of consent.
Certain automated decision-making.
Complaints to an appropriate supervisory authority.

The availability of each right depends on the circumstances and legal basis of the processing. Where required, we will provide additional information about our applicable legal bases, international transfer safeguards, and relevant privacy representative or supervisory authority. If a relevant legal requirement differs from this general Policy, the applicable mandatory legal requirement will govern.

27. Additional Information for Users in Other Jurisdictions

Some jurisdictions provide additional rights concerning personal information. Where applicable, these may include rights to:

Know what categories of personal information are collected.
Know the purposes of processing.
Access specific personal information.
Correct inaccurate personal information.
Request deletion.
Obtain copies of personal information.
Opt out of certain processing activities.
Limit certain uses of sensitive information.
Appeal eligible privacy request decisions.

My Digital Diary does not sell personal information or use private diary records for third-party behavioural advertising. We will provide jurisdiction-specific notices, controls, and legally required disclosures where applicable.

28. Complaints and Supervisory Authorities

If you believe your personal information has been handled improperly, we encourage you to contact us so that we can investigate and respond. However, contacting us first does not remove your right to approach a competent regulatory authority.

28.1 Uganda

Individuals may raise relevant data protection complaints with Uganda's Personal Data Protection Office (PDPO). Personal Data Protection Office (PDPO) Official Website: https://pdpo.go.ug The PDPO is responsible for overseeing and enforcing Uganda's data protection framework.

28.2 Other Jurisdictions

Where relevant data protection laws apply, individuals may also have the right to submit complaints to the competent data protection or privacy supervisory authority. We will cooperate with competent authorities as required by law.

29. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

Changes to application features.
New technologies or integrations.
Changes to applicable laws.
Updated data protection requirements.
Changes in our service providers.
Security or operational improvements.
Changes to our information-processing practices.

When we make material changes, we will provide appropriate notice through the application, website, email, or other suitable means, as required by law. Where a change requires renewed consent, we will seek that consent before undertaking the relevant processing. The most recent version of this Policy will identify its last updated date. We encourage users to review this Policy periodically.

30. Contact Us

We welcome questions, concerns, and requests concerning your personal information. For privacy inquiries, data access requests, correction requests, account deletion requests, or complaints, please contact: My Digital Diary Privacy Support Email: info@my-digital-diary.com Telephone: +256 784 675 790 WhatsApp: +256 704 145 972 Website: https://my-digital-diary.com When contacting us, please describe your request clearly. For your security, do not include passwords, private API keys, or unnecessary sensitive diary information in ordinary email or WhatsApp messages. We may request reasonable identity verification before disclosing, changing, or deleting personal information.

Our Commitment to Your Privacy

My Digital Diary is designed to help you organise your life while respecting the personal nature of the information you choose to record. We are committed to responsible data handling, transparency, appropriate security, and meaningful user control. Your personal information deserves privacy, respect, and protection.