Legal

Privacy Policy

Last updated: March 2026

At Pokea, we believe your business data belongs to you. This Privacy Policy explains what personal data we collect, why we collect it, and how we use and protect it. By using Pokea, you agree to the terms described here.

1. Who we are

Pokea is a product of Revoltek Ltd, a company incorporated in Tanzania. We build point-of-sale and business management software for African businesses. References to "Pokea", "we", "us", and "our" in this policy refer to Revoltek Ltd. Our registered address is in Dar es Salaam, Tanzania. You can reach us at hello@kashpoint.co.tz.

2. What data we collect

We collect data you provide directly when you create an account, set up your business, add staff members, create customers, or contact us. This includes: • Account data: name, email address, phone number, and password (stored encrypted). • Business data: business name, type, location, currency, and tax information. • Transaction data: sales, payments, items sold, and associated customer details. • Staff data: staff names, roles, contact details, and passcodes (stored hashed). • Customer data: names, contact details, and purchase history you enter into Pokea. • Device & usage data: IP address, device type, operating system, app version, and feature usage. We do not collect payment card numbers directly. Payments are processed by Stripe and other payment processors, which have their own privacy policies.

3. How we use your data

We use the data we collect to: • Provide and improve the Pokea platform and related services. • Process payments and payouts on your behalf. • Send transactional communications (receipts, invoices, account alerts). • Respond to support requests and inquiries. • Detect fraud, abuse, and security threats. • Comply with legal and regulatory obligations. • Analyse usage trends to improve our product. We do not sell your personal data to third parties.

4. Data sharing

We share your data only in limited circumstances: • Service providers: We work with Supabase (database & auth) and Stripe (payment processing). These providers process data on our behalf under data processing agreements. • Legal compliance: We may disclose data when required by law, court order, or government authority. • Business transfers: If Pokea is acquired or merged, your data may be transferred as part of that transaction, with appropriate notice to you. We do not share your customer data with other businesses or use it for advertising.

5. Data retention

We retain your account and business data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations. Transaction records are retained for at least 7 years as required by Tanzanian tax law. You may request deletion of your account and associated data at any time by contacting us at hello@kashpoint.co.tz. Note that some data may be retained after deletion where required by law.

6. Security

We take data security seriously. All data is encrypted in transit (TLS) and at rest (AES-256). We use Supabase infrastructure, which meets enterprise-grade security standards. Access to data is role-based and limited to authorised personnel. While we implement strong security measures, no system is 100% secure. We encourage you to use a strong password and enable two-factor authentication.

7. Your rights

Depending on your location, you may have the right to: • Access the personal data we hold about you. • Request correction of inaccurate data. • Request deletion of your data. • Object to or restrict certain processing. • Data portability (receive a copy of your data in a structured format). To exercise any of these rights, contact us at hello@kashpoint.co.tz. We will respond within 30 days.

8. Cookies

The Pokea web dashboard uses cookies and similar technologies to keep you logged in, remember your preferences, and analyse how our services are used. We use only functional and analytical cookies — no advertising cookies. You can control cookie preferences through your browser settings, though disabling cookies may affect the functionality of the web dashboard.

9. Children's privacy

Pokea is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you via email or an in-app notice. Continued use of Pokea after such notice constitutes your acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us: Email: hello@kashpoint.co.tz Address: Revoltek Ltd, Dar es Salaam, Tanzania

For related policies, see our Terms of Service. To contact us with questions, reach out here.