Legal

Data safety

Last updated 14 September 2026. This is the same declaration filed on the app's Google Play listing, written out so you can read it without a Play account.

What the app does not do

No data is sold to anyone, ever.
No data is shared with advertisers, data brokers or analytics profilers.
There is no advertising SDK and no third-party analytics tracker in the build.
The app never requests location, your contact list, your photos or your files.
The app never reads SMS on a shop's phone. The SMS permission is requested on one device only — the phone holding our own merchant SIM — so that Lipa Namba payment confirmations can be matched to subscriptions. A shopkeeper is never prompted for it.
Camera frames are read on the device to decode a barcode and are never uploaded.

Security

All traffic between the app and the server is encrypted in transit over HTTPS. The app refuses plain HTTP.
Sign-in is handled by Firebase Authentication. We never see your Google password.
Your shop's records are visible only to you and to staff you personally add to your shop.
You can request deletion of your data, and it is carried out — see Delete your account.

Data collected, category by category

Personal info — name and email address

Signing you in, and showing your staff who recorded a sale.

Collected: Yes, from Google Sign-In or the email you register with
Shared with third parties: No
Optional: No — an account is required to use the app
In transit: Encrypted in transit (HTTPS)
Can you delete it?: Yes, in the app and at /delete-account

Photos — profile picture URL

Displaying your avatar in the app.

Collected: Yes, the URL only, when you sign in with Google
Shared with third parties: No
Optional: Yes — signing in by email instead means no picture
In transit: Encrypted in transit (HTTPS)
Can you delete it?: Yes

Financial info — your own business records

This is the product: your products, prices, costs, stock, sales and purchases.

Collected: Yes, everything you enter
Shared with third parties: No
Optional: No — there is nothing to show you without it
In transit: Encrypted in transit (HTTPS)
Can you delete it?: Yes

Contacts — customer names and numbers you type in

Attaching a sale to a customer, when you choose to.

Collected: Only what you type. The app never reads your phone's contact list.
Shared with third parties: No
Optional: Yes — sales can be recorded with no customer at all
In transit: Encrypted in transit (HTTPS)
Can you delete it?: Yes

App activity — push notification token

Delivering low-stock alerts when the app is closed.

Collected: Yes, an anonymous device token from Firebase Cloud Messaging
Shared with third parties: With Google, as the delivery service for the notification only
Optional: Yes — decline the notification permission and no token is registered
In transit: Encrypted in transit (HTTPS)
Can you delete it?: Yes, removed on sign-out and on account deletion

Messages — Lipa Namba payment confirmations, on our own merchant phone only

Matching a subscription payment to the shop that made it, automatically.

Collected: Not from a shop's phone. The SMS permission is never requested in a shopkeeper's use of the app and no prompt is shown. It is used on one device — the phone holding the My Shop merchant SIM — and reads confirmation messages from the mobile-money sender IDs (LIPA, M-PESA, the Vodacom short code) only.
Shared with third parties: No
Optional: Yes — it is off by default and switched on per device by an operator
In transit: Encrypted in transit (HTTPS)
Can you delete it?: Payment records are kept as financial records; see the privacy policy

Device or other IDs — IP address in server logs

Rate limiting and diagnosing failures.

Collected: Yes, in request logs
Shared with third parties: No
Optional: No, but it is never linked to your business records
In transit: Encrypted in transit (HTTPS)
Can you delete it?: Deleted automatically after 30 days

Questions about any line here: support@tech-x.co.tz. The full detail — retention periods, legal bases, sub-processors — is in the privacy policy.