Security — report a problem
Found something unsafe? Tell our security team.
Last updated: May 2, 2026
Security policy applicability
Country coverage: Country coverage follows the public market status and country-pack registry.
Entities: Default contracting entity is TWENDEX TRANSPORT NETWORK CO. - SMC LTD, Wakiso, Uganda, unless an approved country-pack annex names a local Twendex or partner entity for that market.
Product lines: Security reports for the website, API, admin, PWA, authentication, payments, uploads, notifications, and PII handling.
Channels: Security reports are accepted for all Twendex-owned production and pilot surfaces, regardless of market launch status.
Framework: Uganda law and courts are the default governing framework unless a signed country-pack annex or mandatory local consumer, transport, privacy, or payment law applies for the market.
Support and regulator path: Start with Twendex support at support@twendex.com or WhatsApp +256 770 616 744 (text only). Regulator or authority paths follow the applicable market annex and mandatory local law.
Effective date: May 2, 2026
View public market launch statusHow to report
Email the security team for safety bugs. Use support for account or booking help.
What to report
Tell us about problems on our website, app, sign-in, payments, uploads, messages, or personal data handling. Share enough detail so we can check it safely.
What to send us
Send the web address or page, steps to make the problem happen, what could go wrong, and safe screenshots or logs. Do not send other people's private data or passwords.
Safe testing rules
Only use your own account and test data. Do not open, change, delete, steal, or break other people's data, money, accounts, or our systems.
What we do not allow
Do not run denial-of-service attacks, trick people, break into buildings, send spam, run harmful scans, or report issues that only affect very old browsers.
When we reply
We aim to reply within two working days and keep you updated while we check and fix the issue. Safety, payment, and personal-data reports come first.
Going public
Please give us reasonable time to fix the issue before you share it publicly. We thank good-faith reporters when we both agree.
Machine-readable contact
Security tools can also read our policy at the standard well-known link below.
/.well-known/security.txtPreferred languages: English, French, and Swahili. /en/security