DUUKA

Privacy Policy

Last updated: 1 August 2026

This Privacy Policy explains how Duuka (“Duuka”, “we”, “us”, or “our”) collects, uses, stores and protects information when you use our websites, apps and business management software at duuka.cloud and related services (the “Services”).

1. Who we are

Duuka is an AI-powered business management platform for retailers and other businesses in Kenya and across Africa. Our office is at The Promenade Westlands, Nairobi. Contact: hello@duuka.cloud · 0716 101 084.

2. Information we collect

Depending on how you use Duuka, we may collect:

  • Account details such as name, business name, email, phone number, password and role.
  • Business data you enter into the Services, including products, stock, sales, customers, expenses, staff records, documents and marketing campaigns.
  • Payment and subscription data such as plan type, billing history and M-Pesa or other payment references. We do not store full card numbers on our servers when payments are handled by third-party providers.
  • Usage and device data such as login times, feature use, IP address, browser type and approximate location.
  • Support communications when you contact us by phone, email or in-app chat.

3. How we use information

We use information to:

  • Provide, operate and improve the Services, including AI insights, POS, inventory, ecommerce and reporting.
  • Create and manage accounts, authenticate users and enforce roles and permissions.
  • Process subscriptions, invoices and related billing.
  • Send service notices, security alerts and (with your consent where required) product updates or tips.
  • Detect fraud, abuse, theft signals and security incidents.
  • Comply with Kenyan law and respond to lawful requests.

4. Customer payments

Duuka helps you record and report sales. Unless we clearly offer a separate payment-collection product, we do not collect your customers’ payments on your behalf. Money from M-Pesa, cash, card or bank stays in your own accounts.

5. Sharing of information

We do not sell your personal data. We may share information with:

  • Service providers who help us host, secure, message or bill the Services, under confidentiality obligations.
  • Professional advisers or authorities when required by law or to protect rights and safety.
  • A buyer or successor if Duuka is involved in a merger, acquisition or asset sale, with notice where required.

6. Data storage and security

We use administrative, technical and organisational measures designed to protect information. No method of transmission or storage is 100% secure. You are responsible for keeping login credentials confidential and for configuring staff access carefully.

7. Retention

We keep information for as long as your account is active and as needed to provide the Services, meet legal obligations, resolve disputes and enforce agreements. You may request deletion of your account subject to lawful retention needs.

8. Your choices

You may access or update account details in the app, request a copy or deletion of personal data we hold about you, and opt out of non-essential marketing emails. Contact hello@duuka.cloud for privacy requests.

9. Children’s privacy

The Services are intended for business use and are not directed at children under 18.

10. Changes

We may update this Policy from time to time. We will post the revised version on this site and update the “Last updated” date. Continued use of the Services after changes means you accept the updated Policy.

11. Contact

Questions about privacy: hello@duuka.cloud · 0716 101 084 · The Promenade Westlands, Nairobi.