Privacy Policy

Who runs DukaKonnect

DukaKonnect is run by Eddie Ezekiel Ochieng, in Kenya. For anything on this page, write to eddie.ochieng@usalama-voice.com.

What is kept

• Your account. Your name, and the phone number or email you sign in with. Your password is stored in a form that cannot be read back, by us or anyone else.
• Your shop's records. What you type in: your shop name, what you sell and for how much, every sale, your stock, what you spend, suppliers, cheques, and any M-Pesa entries you record.
• Your customers. The names, phone numbers and, if you add them, email addresses of customers who take things on deni, with what they owe and have paid.
• Your staff. The names and sign-in details of anyone you add to your shop.
• Visits to this website. Google Analytics records which pages are visited on dukakonnect.co.ke, from what kind of device and roughly where, so we can see what is useful. It does not see your shop's records.

Who can see it

You, and the staff you add. Nobody else. Another shop on DukaKonnect cannot see anything of yours. Staff see less than you do: they can sell and check stock, but not what you paid for goods, your spending, or your profit.

An invoice you share by link can be opened by anyone who has that link, so send it only to the customer it is for.

We do not sell your information, show you advertising, or pass your records to anyone to market to you.

Your customers' details

When you record a customer's name and number, you are the one collecting it, and DukaKonnect keeps it on your behalf. Only record what you need to follow up what they owe, and tell customers you keep a record if they ask.

Sharing prices with other shops (only if you choose)

In the app you can choose to help build a picture of prices across shops. If you switch it on, what is shared is which items sell, at what price and how many, and the kind of business you run in a general area, always counted together with other shops and never on its own.

Never shared, whatever you choose: customer names or numbers, who owes you or how much, your takings, spending or profit, and your shop name, exact location or anything that points to you. You can switch it off at any time.

The services that help run DukaKonnect

A few companies process information for us, each only for its own job:

• Supabase stores your records and handles signing in.
• Vercel hosts the website and app.
• Africa's Talking and Resend deliver the one-time codes sent by SMS or email when you reset a password.
• Google Analytics counts visits to the website, as described above.

Some of these keep data on servers outside Kenya. They are bound by their own security and data protection commitments.

Keeping it safe

Your records are kept on servers, not on your phone, so losing the phone does not lose the books. Every shop's data is separated at the database level, connections are encrypted, and money changes run inside the database rather than on the phone. When a member of staff leaves and you remove them, their login stops working straight away.

Getting it out, or getting rid of it

Under Kenya's Data Protection Act you can ask to see the information held about you, have it corrected, or have it deleted. In practice:

• Export your sales and spending to a spreadsheet whenever you like, from Money.
• Ask through Contact us, or by email, and we will delete your shop and everything in it, for good.
• If you are unhappy with how your information is handled, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

How long it is kept

For as long as your shop uses DukaKonnect. When you ask for deletion, your shop and its records are removed; copies in routine backups are overwritten in the normal course.

Changes

If this policy changes in a way that matters, the date at the top will change and shops will be told in the app.