Privacy Policy

Last updated 28 August 2026

Vumbua POS ("we", "the app") is a point-of-sale and shop-management app built for Tanzanian retail shops (dukas), published by Vumbua Technology. This page explains what we collect, why, and how to have it removed.

What we collect

• Account details — name, phone number, and (optionally) email, when you register or an owner adds you as staff.
• Shop and sales data — products, prices, stock counts, sales, customer credit ("deni"), and expenses you or your staff enter. This is the record your business runs on.
• Location — only when you choose to pin your shop's position on the Soko marketplace map, or search it by distance. We do not track location in the background.
• Photos — product photos, shelf photos, and shop logos you choose to upload, stored securely on our servers (Amazon Web Services).
• Bluetooth — used only to connect to a receipt printer you pair yourself. We do not scan for or track other devices.

What we do not do

• We do not sell your data, or any shop's data, to anyone.
• We do not run advertising or ad-tracking of any kind.
• We do not share customer names or phone numbers with other shops. Cross-shop market insights (Soko) are aggregated and anonymised before they are shown to anyone.

Where it is stored

Sales and shop data live on our servers, backed by Amazon Web Services. Data recorded while your phone is offline is held on the device until the app can sync it, so a shop can keep selling with no signal.

Payments

Subscription payments (M-Pesa or card) are processed by our payment partners; we do not store your card number. Vumbua does not process payments between a shop and its own customers — that money changes hands directly, the app only records that a sale happened.

Deleting some of your data, without deleting your account

You do not need to close your account to remove specific things. Inside the app you can already delete a product, a customer record, or a shelf/product photo, and remove your shop's location pin — each of these takes effect immediately, no request needed.

Deleting your whole account

You can request deletion of your account and everything attached to it — shops, sales, customers, products — from our account deletion page, with no need to have the app installed. We will verify the request is really from you before removing anything, since account deletion cannot be undone.

Once we have verified the request, your account and its data are removed from our live systems. A copy may remain in our secured backups for up to 30 days. We also keep one backup a month for a year for disaster recovery, so a copy taken shortly before your deletion could persist in that monthly archive until it is rotated out, up to 12 months later — it is never restored or used for anything else in the meantime.

Contact

Questions about this policy: support@vumbuatechnology.co.tz