Privacy policy
How UzaPay handles your data
UzaPay is a point-of-sale app for shops. This policy says what
the app collects, why, who processes it, and how to have it deleted.
UzaPay is operated by Boniface Masota, Kenya. Questions about this policy
or your data go to
support@uzapay.co.ke.
What we collect
- Your account: your full name, email address, mobile
number and password. The password is held by Google Firebase
Authentication and is never visible to us.
- Your staff: the name, email address and role of anyone
you invite to your business.
- Your business records: business name and details,
products, prices, stock, sales and how they were paid, returns,
expenses, cash counts, shifts, suppliers and their contact details,
and production records.
- Photos: product photos and a business logo, if you add
them.
- Device details: an identifier for each phone or tablet
used as a till, so each sale and shift can name the device it was made
on.
- Error reports: when something goes wrong, the app
sends a report containing the error, the steps that led to it, your
user ID, name, email address and business name. Screen recordings are
never taken, and passwords, tokens and customer details are removed
before a report leaves the device.
UzaPay does not collect your location, contacts, messages or anything
about your customers beyond what a sale records. It shows no ads and does
not sell or rent data to anyone.
Why we use it
To run the app: to sign you in, keep your business's records and share
them with the staff you invite, send account emails (verification,
password reset, invitations), and find and fix faults. Nothing is used
for advertising or profiling.
Who processes it for us
Data is sent over encrypted connections to these services, which process
it only to provide the app:
- Google Firebase (Google LLC) stores your account and
business records and photos. Its servers are in the United
States.
- Brevo sends account emails to the addresses
involved.
- remove.bg (Kaleido AI) receives a product photo only
when you ask the app to remove its background.
- Error reports go to a GlitchTip server operated by
UzaPay itself.
Receipts are sent directly from your device to the printer you set up on
your own network.
How long we keep it
Business records are kept while the business has an active account, so
its history stays available to the business. Error reports are kept for
up to 90 days. When an account is deleted, its data is removed as
described on the account deletion page.
Your rights
Under Kenya's Data Protection Act, 2019 you may ask to see, correct or
delete the personal data we hold about you, or object to how it is used.
Email support@uzapay.co.ke from
the address on your account and we will answer within 30 days.
Children
UzaPay is a business tool for adults and is not directed at anyone under
18.
Changes
If this policy changes, the new version will be published here with a new
date.