Privacy Policy for UjuziPOS

Last Updated: September 12, 2026

1. Information We Collect

We may collect the following types of information:

• Personal Identification Information: This includes your name, email address, phone number, username, and password. We collect this information when you register for an account, update your profile, or communicate with us. For example, when you sign up for our Service, you will be asked to provide your name and email address.
• Usage Data: We collect information about how you use our Service, such as the features you access, the actions you take, the time and duration of your sessions, and other usage statistics. For instance, we may track which features of our platform are most frequently used.
• Device Information: We may collect information about the device you use to access our Service, including the device type, operating system, IP address, browser type, and unique device identifiers. This helps us optimize our Service for different devices.
• Payment Information: If you subscribe to a paid version of our Service, we collect necessary payment information, such as credit card details or other payment method information. This information is securely processed by our payment service providers.
• Communications: We may retain records of our communications with you, including emails and support tickets, to provide customer support and improve our Service.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to collect information about your browsing activities on our Service. This helps us personalize your experience, analyze usage patterns, and improve our Service. For example, cookies can remember your login information.

2. How We Use Your Information

We may use your information for the following purposes:

• To Provide and Maintain the Service: To deliver the features and functionality of our SaaS platform, manage your account, and provide customer support. For example, we use your email address to send you login credentials and service-related notifications.
• To Personalize Your Experience: To tailor the content and features of our Service to your interests and preferences based on your usage patterns.
• To Communicate with You: To send you important notices, updates, promotional materials, and other information related to our Service, in accordance with your communication preferences. You can opt-out of marketing communications at any time.
• To Improve and Develop Our Service: To analyze usage data, identify trends, and improve the performance, security, and functionality of our SaaS platform.
• To Process Payments: To manage billing and process payments for users who subscribe to paid features.
• To Ensure Security and Prevent Fraud: To monitor and protect our Service from unauthorized access, misuse, and fraudulent activities.
• To Comply with Legal Obligations: To comply with applicable laws, regulations, and legal processes in Kenya.

We do not sell your personal information to third parties.

3. How We Share Your Information

We may share your information with the following categories of recipients:

• Service Providers: We may share your information with third-party service providers who assist us in delivering and operating our Service, such as hosting providers, payment processors, analytics providers, and customer support services. We ensure these providers are contractually obligated to protect your information.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity as part of the transaction. We will notify you of any such transfer and any changes to this Privacy Policy.
• Legal Requirements: We may disclose your information if required by law, legal process, or government request, or if we believe it is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.
• With Your Consent: We may share your information with third parties when we have your explicit consent to do so.

4. Data Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include encryption, access controls, regular security assessments, and employee training on data protection practices. However, please understand that no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security of your information.

In the event of a data breach, we will take steps to contain the breach and notify the Office of the Data Protection Commissioner and affected users in accordance with the requirements of the Kenya Data Protection Act, 2019.

5. Data Retention

We will retain your personal information for as long as necessary to provide you with our Service, fulfill the purposes outlined in this Privacy Policy, or as required by applicable laws and regulations in Kenya. When your information is no longer needed, we will securely dispose of it.

If you close your account, we may still retain certain information for legitimate business purposes, such as to comply with legal obligations, resolve disputes, and enforce our agreements.

6. Your Rights Under the Kenya Data Protection Act, 2019

Under the Kenya Data Protection Act, 2019, you have certain rights regarding your personal data, including:

• The Right to be Informed: You have the right to be informed about the collection and use of your personal data. This Privacy Policy serves to fulfill this right.
• The Right to Access: You have the right to request access to your personal data that we hold and to receive a copy of it.
• The Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• The Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if there are no other legal grounds for processing it.
• The Right to Restrict Processing: You have the right to request the restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
• The Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• The Right to Object: You have the right to object to the processing of your personal data in certain situations, including for direct marketing purposes.
• Rights in Relation to Automated Decision-Making and Profiling: You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you.

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request in accordance with the timelines and procedures set out in the Kenya Data Protection Act, 2019. We may require you to verify your identity before processing your request.

7. Cross-Border Data Transfers

If we transfer your personal data to countries outside of Kenya, we will ensure that such transfers comply with the requirements of the Kenya Data Protection Act, 2019. This may include transferring data to countries with adequate data protection laws or implementing appropriate safeguards, such as standard contractual clauses approved by the Data Commissioner.

8. Children's Privacy

Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements in Kenya. We will notify you of any material changes by posting the updated policy on our website or through other appropriate communication channels. The date of the latest revision will be indicated at the top of the policy. We encourage you to review this Privacy Policy periodically.