Who We Are
SmartDuka is a point-of-sale and business management application developed and operated by an independent developer under the SAVO Tech brand.
SmartDuka is designed to help businesses manage products, inventory, sales, receipts, payments, and other day-to-day business operations.
Information We Collect
Depending on how you use SmartDuka, we may process the following categories of information:
Account Information
Name, email address, phone number, account identifiers, and authentication information.
Business Information
Business or shop names, settings, configuration, and other information you provide.
POS Data
Products, barcodes, prices, inventory, sales records, receipts, and transaction-related information.
Device Information
Device type, operating system, application version, diagnostics, and security-related information where applicable.
How We Use Information
We use information processed through SmartDuka to provide, maintain, secure, and improve the service.
- Provide and operate SmartDuka.
- Create and authenticate user accounts.
- Manage businesses, shops, products, and inventory.
- Record and manage sales and receipts.
- Support payment-related functionality.
- Synchronize information between supported devices and cloud services.
- Protect SmartDuka against fraud, abuse, and unauthorized access.
- Diagnose technical problems and improve reliability.
- Respond to support and privacy requests.
- Comply with applicable legal obligations.
Firebase & Service Providers
SmartDuka may use Google Firebase and other trusted infrastructure providers to operate portions of the service.
Depending on the features enabled, these services may include:
- Firebase Authentication
- Cloud Firestore
- Firebase Cloud Functions
- Firebase Hosting or App Hosting
- Firebase Cloud Messaging
Third-party service providers may process information on our behalf where necessary to provide SmartDuka and its supporting infrastructure.
Payments & M-Pesa
SmartDuka may provide functionality that interacts with supported payment providers, including M-Pesa.
When a payment feature is used, information necessary to initiate, authenticate, confirm, or record the transaction may be transmitted to the relevant payment service provider.
Payment processing is subject to the applicable terms and privacy practices of the relevant payment provider.
eTIMS Integration
eTIMS is not currently integrated into SmartDuka.
SmartDuka does not currently provide an integrated eTIMS service. eTIMS integration may be developed and enabled upon request, subject to technical availability, applicable requirements, and any necessary configuration or third-party services.
If eTIMS functionality is introduced into SmartDuka, the applicable data processing practices will be reviewed and this Privacy Policy will be updated where necessary.
Camera & Barcode Scanning
SmartDuka may request access to your device camera when you use barcode-scanning functionality.
Camera access is used to support scanning functionality and is not intended to provide access to unrelated photographs or videos.
Data Storage & Security
SmartDuka may store information locally on your device to support application functionality, including workflows that operate when connectivity is unavailable.
Applicable information may also be synchronized with cloud infrastructure to provide account, backup, synchronization, and other online services.
We take reasonable technical and organizational measures to protect information against unauthorized access, disclosure, alteration, or destruction. However, no electronic system can be guaranteed to be completely secure.
Data Retention
We retain information for as long as reasonably necessary to provide SmartDuka, maintain legitimate business records, resolve disputes, prevent abuse, and comply with legal obligations.
When information is no longer reasonably required, it may be deleted, anonymized, or securely disposed of, subject to applicable legal and operational requirements.
Your Privacy Rights
Depending on applicable law, you may have rights relating to your personal information, including requesting access, correction, deletion, objection, restriction, or portability where applicable.
Kenyan data protection law provides data subjects with rights relating to the processing of their personal data. Requests may be submitted using the contact information below.
Account & Data Deletion
You may request deletion of your SmartDuka account and associated personal information through our dedicated account deletion page:
Request Account Deletion →You may also send a deletion request directly to our privacy email address. Where reasonably necessary, we may request information to verify that the request relates to the account owner.
Important
Certain information may be retained where required by law, necessary to establish or defend legal claims, required for legitimate accounting or transaction records, or otherwise permitted by applicable law.
Children's Privacy
SmartDuka is intended for businesses and their authorized users and is not directed toward children.
We do not knowingly design SmartDuka to collect personal information from children for purposes unrelated to providing the service.
International Data Transfers
Because SmartDuka may use cloud and infrastructure providers operating in multiple jurisdictions, information may be processed or stored outside Kenya.
Where applicable, we take reasonable steps to ensure that international processing and transfers are handled in accordance with applicable data protection requirements.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to SmartDuka, applicable law, or our data practices.
When material changes are made, we may update the effective date shown at the top of this page and, where appropriate, provide additional notice.
Contact Us
If you have questions about this Privacy Policy, your personal information, or a privacy request, please contact the developer of SmartDuka.