Data Privacy Policy

Your business data is private. This policy explains how BizYangu handles your information with simplicity and transparency.

1. Information We Collect

To make the app work, we collect:

• Account Identity: Your phone number, BizYangu user ID, and display name for OTP login, account access, and business membership.
• Contacts: Names and phone numbers that you enter manually or optionally select from your device contacts for customers and staff. Contact permission is optional; you can enter these details manually instead.
• Business And Financial Data: Your business name, inventory, sales, expenses, balances, suppliers, staff records, customer records, and other operational information you enter into BizYangu.
• Subscription Data: Purchase history and entitlement status needed to provide and restore BizYangu Pro subscriptions.
• Photos, Files And Documents: Optional inventory photos and expense attachments, including images and PDF documents, that you choose to upload.

2. How We Use Your Data

• Account And App Functionality: To authenticate you, operate your business workspace, and provide the features you choose to use.
• Synchronization And Backup: To make authorised business data available across owner and staff devices and restore it when needed.
• Reports And Analytics: To generate Profit & Loss reports, stock and sales insights, and staff performance views from your own business records.
• Subscriptions: To process, verify, restore, and support BizYangu Pro purchases.
• Communication And Support: To send essential authentication or service messages and respond to support requests.

3. Data Sharing & Third Parties

We do not sell your data or use it for advertising. Data is processed only by service providers needed to operate BizYangu:

• Supabase: For phone authentication, secure cloud database storage, file storage, and real-time syncing.
• RevenueCat: For subscription purchase history, entitlement verification, and subscription management.
• Google Play And Apple App Store: For app distribution, in-app purchase processing, and store compliance.
• Google Cloud: For hosting supporting BizYangu services.

4. Data Security

• Local Storage: Your data is stored locally on your device (Sembast) for offline access.
• Cloud Security: Data sent to Supabase and RevenueCat is encrypted in transit, and cloud records are protected by service controls and business-level access rules.
• Role Access: Workers can only see the data you permit (e.g., they cannot see your total net profit or other workers' commissions).
• Optional Device Access: Contact, camera, photo, and file access is used only when you choose the related feature and grant permission.

5. Your Rights

• Access: You can view all your business data within the app.
• Export: You can export your sales and expenses to CSV at any time.
• Deletion: You can request deletion of your account and associated cloud data by following the steps on our account deletion page. We may verify your identity before processing the request. Data required for legal, security, fraud-prevention, or accounting obligations may be retained only for the period required by law.

6. Compliance

BizYangu aims to comply with the Kenya Data Protection Act (2019). We treat your business information with the highest level of confidentiality.