Privacy policy

Last updated: 2026. This policy explains what DukaVault ("we") collects, why, and your choices. The business behind DukaVault is DukaVault Ltd, P.O. Box 723, Nanyuki, contact contact@dukavault.com.

What we collect

• Account details: your name, email address and password (stored scrambled, never in plain text). If you sign in with Google, we receive your name and verified email address from Google, and nothing else.
• Business data you enter: shop name and settings, products, prices, stock, sales, customers and their balances, staff, and bookings. If you use the app without a cloud account, this stays on your device only.
• Payment records for your DukaVault plan: handled by our payment provider (Paystack). We receive confirmation of payment, not your full card number.
• Technical data: error and usage logs needed to run and secure the service.

Why we use it

To run the service you asked for: sign you in, store and sync your shop's data between your devices, provide reports, take payment for your plan, send service messages (such as trial or renewal notices), and keep the service secure.

Who sees it

Only you and the staff you add can see your business data. We do not sell your data or use it for advertising. We use service providers to operate DukaVault (server hosting, payments, email or SMS, and Google sign-in if you choose it). They may only use the data to provide their service to us. We may disclose data if the law requires it.

Where it is stored and for how long

Cloud-synced data is stored on servers in the cloud, with regular encrypted-in-transit backups. We keep your data while your account is active. You can ask us to delete your account and data at any time; backups are cleared within 30 days.

Your choices and rights

You can ask us to see, correct, export or delete your data by contacting us. Under data-protection law (for example Kenya's Data Protection Act, 2019) you may also have the right to complain to the data protection authority.

Children

DukaVault is for businesses and is not meant for children.

Changes

If we change this policy we will update the date above and, for big changes, tell you in the app or by email.