Privacy policy
Last updated: 8 October 2026
Yo Dduka is a tool a business uses to run its shop, Mobile Money and agent-banking counter: sales, stock, transactions, opening and closing counts and reports. It is used only by people the business owner has given a login to. This page explains what information the app handles and why.
Who is responsible
Each business that uses Yo Dduka (the shop owner) decides what is recorded and who can see it. The app is provided by Zireva Ventures. You can reach us through the contact email shown on the Yo Dduka page in the Google Play Store.
What is collected
- Staff accounts: name, username, role, password (stored only as a one-way scrambled code) and, if switched on, a two-step login secret.
- Business records the staff enter: sales and receipts, stock, expenses (with receipt photos), Mobile Money and agent-banking transactions (amount, transaction reference, and the customer's phone number, account number or name where the staff type them), customers who buy on credit, suppliers, and the money counted at opening and closing.
- Location at opening and closing: when the business owner switches on "opening checks", the phone's location is taken once when the day is opened and once when it is closed, only to confirm the person is at the shop. Location is never tracked in the background or at other times.
- Photos: a photo taken at opening (if the owner switches it on) and photos of expense receipts. Photos are taken only when the person taps the camera button.
- Phone checks: if the owner allows only the shop's own phones, a code is saved on that phone to recognise it.
- Activity log: logins and important actions (for example a cancelled sale) with the time, so the owner can review them.
How it is used
Only to run the business: to work out what should be in the drawer and on the floats, profit, stock and staff performance, and to send the owner reports and alerts. The information is not used for advertising, is not sold, and is not shared with anyone outside the business, except as described below.
WhatsApp messages
Daily summaries and alerts are sent to the WhatsApp numbers the owner enters, through the CallMeBot WhatsApp service. These messages contain business figures (for example the day's sales and balances).
Subscription payments and support
When a business pays its Yo Dduka subscription online, the payment is processed by Flutterwave. We keep the amount, the date and the payment reference, never PINs or card numbers. Many businesses use the same Yo Dduka service, but each one sees only its own records. Yo Dduka support can look inside a business only while its Super Admin allows it, and everything support does is shown in that business's activity list. A business can download all its records at any time (More › Download my data).
Where it is kept and how it is protected
Everything is stored on the business's own server and sent only over an encrypted connection (HTTPS). Entries made without internet are kept on the phone until they are sent, then removed; logging out clears saved screens from the phone. Staff can only see what their role allows, and every page checks the login. The server keeps daily backups for 14 days.
How long it is kept, and deleting it
Business records are kept as long as the business uses Yo Dduka, because they are its accounts. A staff member who leaves can be disabled by the owner. To ask for information about you to be corrected or deleted, contact the business that gave you your login, or us at the contact email on the Play Store page.
Children
Yo Dduka is a business tool for adults and is not meant for children.
Changes
If this policy changes, the new version is published on this page with a new date.