Privacy Policy

1. Introduction

Welcome to Katemba POS ("Katemba", "we", "our", or "us"). We are committed to protecting the personal information you share with us when using our mobile application and web platform (collectively, the "Service").

This Privacy Policy explains what data we collect, how we use it, who we share it with, and the choices you have. By using Katemba, you agree to the practices described in this policy.

2. Information We Collect

Account & Identity Information

• Full name and email address (used to create and manage your account)
• Business name and business type
• Staff member names and assigned roles

Business & Transaction Data

• Products, prices, stock quantities, and categories you add to the app
• Sales transactions, payment amounts, and payment methods (cash or mobile money)
• Refund and discount records
• Store location names (no GPS coordinates are collected)

Payment Information

• Mobile money phone numbers entered when subscribing to the Professional plan
• We do not store your full payment credentials. Payment prompts are processed directly by your mobile money operator (MTN, Airtel, Zamtel) via the Lipila payment gateway

Device & Usage Information

• Device type, operating system version, and app version
• Crash reports and error logs (used to fix bugs)
• App usage patterns such as which screens are visited (no keystroke logging)

3. How We Use Your Information

• To create and manage your Katemba account and business profile
• To provide and operate the point-of-sale features you use
• To process subscription payments via mobile money
• To sync your data across devices and restore it if the app is reinstalled
• To send you important service notifications (e.g. payment confirmations, updates)
• To diagnose crashes and improve app performance
• To enforce our Terms and Conditions and detect fraudulent activity

4. Data Storage & Security

Your data is stored on Supabase-managed servers hosted on Amazon Web Services (AWS) infrastructure. All data is encrypted in transit using TLS (HTTPS) and encrypted at rest.

Access to your business data is controlled by row-level security policies. Only authenticated users belonging to your business can read or modify your records.

Staff accounts have role-based permissions. Owners control what managers and cashiers can see and do within the app.

5. Third-Party Services

Katemba uses the following third-party services to operate:

• Supabase – database and authentication provider
• Lipila Payment Gateway – processes mobile money subscription payments
• Expo / EAS – app build and over-the-air update delivery
• Sentry – crash reporting and error monitoring

Each third party has its own privacy policy governing how they handle data passed to them. We only share the minimum data necessary for each service to function.

6. Offline Mode & Local Data

Katemba works offline. When you process sales without an internet connection, transaction data is stored locally on your device and synced to our servers when connectivity is restored.

Local data is stored in the application's private storage and is not accessible to other apps on your device.

7. Data Retention

We retain your business data for as long as your account is active. If you delete your account, your data will be removed from our active servers within 30 days. Backups may retain data for up to 90 additional days before permanent deletion.

Transaction records may be retained for longer periods where required by applicable law.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information in your account
• Request deletion of your account and associated data
• Export your transaction data as a CSV file from the Settings screen
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at support@katemba.app.

9. Children's Privacy

Katemba is designed for use by businesses and individuals aged 18 and older. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify you within the app or by email.

Your continued use of Katemba after changes are posted constitutes your acceptance of the revised policy.