Privacy Policy

1. Overview

Biz Yangu ("we", "us", "our") is built and operated by Banda-Tech App. It is a business management application for informal and small businesses in Kenya, available as a web app at bizyanguapp.co.ke, as an installable app, and as an Android app on Google Play. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

2. Information We Collect

We collect the following when you use Biz Yangu:

• Account and business details you provide: your business name, your phone number, business type, county, and your KRA PIN (optional).
• Staff access: if you set up staff access, the staff member’s name and the 4-digit PIN you choose for them.
• Business records you enter: products and prices, stock levels, sales, credit records, and invoices.
• Your customers’ details that you choose to add for credit tracking, such as their names and phone numbers. You are responsible for having the right to store them. We process them on your behalf and only to provide the app to you.
• Invoice photos and PDFs you upload: supplier invoices that you choose to scan with the Restock from Photo feature. We read them to fill in the items and quantities, and we do not store the file itself.
• Messages to us: support requests and account deletion requests.
• Payment records: the M-Pesa transaction reference and amount when you pay for a subscription. We never see or store your M-Pesa PIN.
• Technical information: app version, device and browser type, IP address, and basic logs such as sign-in attempts, used to keep the service secure and reliable.

We do not collect your precise location, and we do not access your phone contacts, microphone or messages.

3. How We Use Your Information

We use your information only to operate and improve Biz Yangu, including to:

• Provide the core features: stock tracking, sales logging, credit management, reports and invoices
• Verify your phone number with a one-time code when you sign in
• Read the supplier invoice photos or PDFs you upload and fill in the items and quantities for you
• Suggest a VAT category for the products you add
• Record and manage subscriptions and payments
• Respond to support and deletion requests
• Show you announcements from Biz Yangu inside the app
• Keep the service secure, for example by temporarily locking sign-in after repeated failed attempts

Reminders to your customers. When you tap Send Reminder, Biz Yangu opens WhatsApp with a message ready to send. You send it from your own WhatsApp account. We do not send it for you, and we do not see any reply.

We do not show ads and we do not use your data for advertising.

4. Who We Share Data With

We do not sell your data, and we do not share it for marketing or advertising. We use a small number of service providers that process data on our behalf, only as needed to run Biz Yangu:

• Google (Firebase Authentication and reCAPTCHA): sends and checks the one-time code for your phone number, and helps protect sign-in from abuse.
• Hosting and database providers (currently Render, Supabase and Netlify): store and serve your data.
• An AI service provider: receives the invoice photos or PDFs you choose to scan, and the name of a product when the app suggests a VAT category for it, so it can send back the result. We use it only to return the result to you.
• M-Pesa (Safaricom): processes subscription payments you make through M-Pesa, under its own privacy terms.

Our team can access your account data when needed to give you support. We may also disclose information if the law requires it. Our providers may store or process data on servers outside Kenya, including in Europe.

5. Data Storage and Security

Data is encrypted in transit (HTTPS), and our database provider encrypts stored data at rest. We take reasonable technical and organizational measures to protect your information from unauthorized access, loss, or misuse. No system is completely secure, so please keep your phone locked and log out on shared devices.

6. Offline Data

Biz Yangu stores a local copy of your data on your device to enable offline use. This data syncs securely with our servers once your device reconnects to the internet.

7. Your Rights and Choices

You can view and update your business details in the app under Profile. You also have the right to access, correct and delete your data, and to object to its processing, as provided under the Kenya Data Protection Act, 2019.

To delete your account: open the app, go to Profile and tap Request account deletion, or use our account deletion page. For any other request, contact us using the details below.

If you are not satisfied with how we handle your data, you may complain to the Office of the Data Protection Commissioner of Kenya.

8. Data Retention and Deletion

We keep your data while your account is active, and for a reasonable period afterwards in case you wish to come back. You can ask us to delete it sooner at any time.

When you ask us to delete your account, we permanently delete your account and its business data, including products, sales, credit records, customer details, invoices, staff access details and support messages, within 30 days of confirming that the request is from you. Copies in our providers’ routine backups may remain for a limited time before they are overwritten. We may keep subscription payment records for as long as the law requires for accounting and tax purposes.

9. Children's Privacy

Biz Yangu is intended for business owners and is not directed at children. We do not knowingly collect information from individuals under the age of 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or on our website, and the "Last updated" date above will change.

11. Contact Us

Questions or requests about your data? Contact us on WhatsApp at +254 714 272 701 or by email at bizyangusupport@banda-techapp.net.