Privacy policy

Who this covers

It covers people who create or use a Duka Pro account (owners, managers, cashiers, and other staff), people who contact us for support, and people who apply to the affiliate or shareholder programs.

Shops also store their own records in Duka Pro - customers, suppliers, sales, and payments. For those records, the shop is responsible for telling its customers how it uses their details. Duka Pro stores and processes that information so the shop can run its business.

Information we collect

• Account details. Name, email, phone number, username, role, and a password. Passwords are stored in a form that cannot be read back.
• Business records you enter. Shop and branch details, products, stock, sales, receipts, invoices, expenses, customers, suppliers, credit balances, and wallet or payment-account activity.
• Subscription payments. The mobile-money number and provider (such as MTN or Airtel) used to pay for a plan, and the payment result we receive from our payments partner.
• Support and chat. Messages you send us on WhatsApp or through the live chat on our website and sign-in pages.
• Technical logs. When something goes wrong, we may store the page address, a short description of the error, and the IP address of the request. These logs are kept for about 90 days.
• Program applications. Details you submit to join as an affiliate or shareholder, including contact information and, for shareholders, payment details needed to complete a deposit.

How we use it

• To create your account, sign you in, and run the shop tools you have turned on.
• To take subscription payments and keep a record of what was paid.
• To answer support requests and fix faults.
• To prepare receipts, invoices, reports, and exports that you ask the product to produce.
• Where a shop has switched on Uganda EFRIS, to send the sales information that filing requires to the tax authority.
• To operate the affiliate and shareholder programs you choose to join.

We do not sell personal information.

Who we share it with

• People in your business. Owners and staff see the records their role allows, such as sales, customers, and stock.
• Payments. Mobile-money payments are sent through Yo! Payments and the mobile-money network you select. They receive the phone number and amount needed to complete the payment.
• Live chat. The chat widget on our public and sign-in pages is provided by Tawk.to. If you use that chat, Tawk.to receives the messages you type there.
• Tax filing. If your shop uses EFRIS, invoice details are submitted for filing with the Uganda Revenue Authority.
• Hosting and maintenance. The service is stored on servers we operate or rent so the product can run. We may also use a platform operator’s access to help a shop that asks for support.

Cookies and storage on your device

We use a session cookie to keep you signed in, and a security cookie so forms you submit come from your own browser. Your chosen light or dark theme is saved in this browser only. Affiliate links may store a referral code in the session until you finish registering.

How long we keep it

Shop sales, stock movements, and amounts owed stay with the shop. If a shop has switched on Uganda EFRIS, the filings that shop has sent stay for that service. Error logs, including IP addresses, are removed after about 90 days. Personal details on a login are deleted when that person deletes the account, as described below.

Delete your account

Shop owners can ask us to delete their account from the profile page in the owner area, and on the web: https://dukapro.net/account/delete. You confirm with your password and tell us what happened. Sending that form does not delete the account. We read the request and contact you before any login is removed. Staff logins are not deleted from the POS or other staff screens. The owner who created the login removes it.

If a login is removed after that review, sale totals, stock, and balances stay with the shop. If the shop has switched on Uganda EFRIS, the filings already sent for that service stay with it.

Security

Pages and sign-in are served over HTTPS. Passwords are stored in a form that cannot be read back. Access to a shop is limited to people invited to that business, and each person sees only what their role allows. Sign-in sessions are renewed when you log in.

Your choices

Shop owners can update their profile in the app, or send a deletion request from the request page. Staff ask the owner who created the login. If you are a customer of a shop that uses Duka Pro, contact that shop about the records it keeps. Questions about this policy can also be sent on WhatsApp, linked below.

Children

Duka Pro is a business tool. We do not knowingly collect information from children for their own accounts.

Changes

If we change this policy, we will post the new version on this page and update the date at the top.

Contact

Questions about this policy can be sent on WhatsApp.