Privacy Policy

1. Introduction

Dukani ("we," "our," or "us") operates the Dukani mobile application (the "App"), a stock management and Point of Sale (POS) app for retailers and local shops. This policy explains what information we collect, how we use it, who we share it with, and the choices you have — including how to delete your account.

By creating an account and using Dukani, you agree to the practices described here.

2. Information We Collect

Using Dukani requires an account. We collect:

• Account & identity: your phone number (used to sign in and to verify your identity), your name and shop name, an optional email address, your preferred language, and a 4-digit PIN that we store only in hashed (irreversible) form.
• Authentication data: one-time SMS verification codes (at sign-up and when resetting your PIN) and session tokens that keep you signed in and let you sync across devices. We also store a device identifier to secure your sessions.
• Business data you create: your products (names, prices, stock levels, categories, and any SKU, barcode, expiry or batch details you enter), sales and receipts, customers (name and optional phone number) and the credit/debt balances you track for them, and inventory movements.
• Product photos (optional): if you add a photo to a product, you choose an existing image from your device's photo library. We upload that image to our cloud storage so it appears on your other devices.

Dukani does not use your camera, and does not collect location, contacts, or advertising identifiers.

4. How We Use Your Information

We use your information to:

• create and secure your account and verify your phone number;
• provide the App's features — inventory, sales, receipts, customers and debts, and reports;
• back up your data to the cloud and sync it across your devices;
• keep the service secure, prevent abuse, and fix problems.

5. Service Providers We Share Data With

We do not sell, rent, or trade your data, and we do not share it with advertisers. We share the minimum necessary with trusted service providers who process data on our behalf:

• SMS provider (Twilio): receives your phone number to deliver the one-time verification codes used at sign-up and PIN reset.
• Cloud hosting & storage: our hosting provider stores your account, business data, and any product photos so they can be backed up and synced.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and our service.

7. Data Security

We encrypt data in transit using HTTPS/TLS, store PINs only as hashes, and keep databases behind secured infrastructure. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard measures.

8. Children's Privacy

Dukani is a business tool intended for shop owners and is not directed to children under 13. We do not knowingly collect personal information from children. If we learn we have, we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last Updated" date above.