Privacy Policy

1. Who we are

Kasuwa (“Kasuwa”, “we”, “us”) is an offline-first sales and shop-management app for small businesses, built for shops in Kano, Arewa and across Northern Nigeria. This policy applies to the Kasuwa mobile app and to this website.

For the purposes of the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation, Kasuwa acts as the data controller for the account and shop information described below. Shop data you enter about your own customers is information you control as a business owner; Kasuwa processes it on your behalf to provide the service.

2. What we collect

We collect only the information we need to run the service.

Category	Examples
Account information	Your name, phone number, password (stored hashed), state, LGA, market name, and shop details you provide during sign-up.
Business data you enter	Products, prices, stock levels, sales, payments, customer names and phone numbers, credit balances and repayments, expenses, shops, staff roles and invitations.
Device and technical information	Device and operating-system type, app version, sync status and error logs, and the IP address used to reach our backend.
Subscription information	Plan type and billing status. Card and bank details are handled by our payment providers — we receive transaction references and confirmations, not full card details.
Support communications	Messages you send to our support team and the contact details you use.

The app may ask for permission to use features such as sharing a receipt or report from your device. Those permissions are used only for the action you choose.

3. Why we use it

To create and secure your account, and to sign you in.
To provide shop management features: sales, stock, customers, credit, repayments, expenses and reports.
To synchronise your shop data across your devices when you are connected.
To manage staff invitations and multi-shop access according to your plan.
To process subscription payments and manage plan limits.
To provide support, investigate problems, and prevent fraud or abuse.
To improve the app’s reliability and features, using aggregated or de-identified information where possible.
To meet legal and accounting obligations.

We do not sell your personal information, and we do not use your shop data for advertising.

4. Where data is stored

On your device. On Android and iOS, core shop data is stored in a local SQLite database inside the app.
On our backend. Account and shop data is stored in a PostgreSQL database operated for Kasuwa, with authentication handled by our backend.
With payment providers. Subscription payments are processed by providers such as ZainPay, Monnify or Paystack, depending on configuration. Their own privacy policies apply to payment data they handle.

Our infrastructure may be hosted in Nigeria or in other countries. Where data is transferred outside Nigeria, we take steps to ensure it receives an appropriate level of protection consistent with applicable law.

5. Offline use and synchronisation

Kasuwa is designed to work without a reliable internet connection. Changes you make while offline — products, customers, sales, payments and expenses — are queued on your device and sent to our backend when a connection is available. Changes that fail to sync are retained for retry rather than being silently discarded.

Data that has not yet synced exists only on your device. If you uninstall the app or clear its storage before those changes sync, that unsynced data cannot be recovered by us.

We share information only in these circumstances:

Service providers. Hosting, database, payment and communication providers who process information on our instructions and under contractual confidentiality obligations.
Your shop team. Staff you invite can see shop data according to the role you assign them.
Legal requirements. Where we are required to disclose information by law, regulation, court order or a lawful request from a competent authority.
Protecting rights. Where necessary to investigate fraud, protect the safety of users, or enforce our terms.
Business changes. If Kasuwa is involved in a merger, acquisition or transfer of assets, information may be transferred as part of that transaction, subject to this policy.

We do not sell personal information.

7. How we protect data

We use reasonable technical and organisational measures designed to protect information, including authenticated access to our backend, hashed passwords, encrypted connections where configured, and access controls for our systems.

No system is perfectly secure

No method of transmission or storage is completely secure. We cannot promise that data will never be lost or accessed without authorisation, and we do not describe our security as “bank-grade” or “unhackable”. Please use a strong, unique password and keep your phone protected.

8. How long we keep it

We keep account and shop information for as long as your account is active, and for a reasonable period afterwards if needed to resolve disputes, meet legal obligations, or complete a deletion request. When you request account deletion, we remove or anonymise the information described on our account deletion page, subject to records we are legally required to keep.

Data stored only on your device remains there until you uninstall the app, clear its storage, or delete the relevant records in the app.

9. Your rights

Subject to applicable law, you may have the right to:

Ask what personal information we hold about you and request a copy.
Ask us to correct information that is inaccurate or incomplete.
Ask us to delete your account and associated information.
Object to or restrict certain processing.
Request a portable copy of information you provided, where available.
Lodge a complaint with the Nigeria Data Protection Commission.

To exercise any of these rights, contact us using the details below. We may need to verify your identity — usually using the phone number registered to your account — before acting on a request.

10. Deleting your account

You can request deletion of your Kasuwa account and associated data at any time. Our account deletion page explains what is deleted, what may be retained, and how to submit a request.

11. Children

Kasuwa is intended for business owners and their staff. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us so we can remove it.

12. Changes to this policy

We may update this policy as the app develops. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you in the app or by other reasonable means. Please review this page from time to time.

13. Contact us

Questions about this policy or your information can be sent to privacy@Kasuwa.app. For account and app support, use support@Kasuwa.app.

We aim to respond to privacy requests within 30 days. If you are not satisfied with our response, you may contact the Nigeria Data Protection Commission.