Privacy policy
Last updated 7 August 2026 ยท Sunac Technologies Ltd
My Duuka is a till and stock system for shops. This policy explains what we hold, why we hold it, and what we will never do with it. If anything here is unclear, ask us at developers@sunactl.com.
What we store
Only what the app needs in order to be your shop's records:
- Your shop - its name, phone number, email, location and country.
- Your account - your name, email address, and a password we can never read (it is stored as a one-way hash).
- Your attendant's account, if you create one, and what you allowed them to do.
- Your trading records - products, stock, deliveries, sales, customers, suppliers and expenses that you enter.
- Your device - an identifier the app generates for itself, plus the phone model and operating system version, shown in your own activity trail.
What we do not collect
These are worth naming, because many apps of this kind do take them:
- No location. The app never asks for GPS. Your shop's location is text you type.
- No contacts. Customers are people you enter yourself. We never read your phone book.
- No photos or files. The app cannot see your gallery or storage.
- No microphone. The camera is used only to scan barcodes, and only when you open the scanner.
- No advertising identifiers, and no tracking across other apps or websites.
Why we store it
To run the service you asked for: storing the backups you choose to make from your phone, so your records can survive a lost handset, and letting you sign back in. We do not profile you, and we do not use your trading data to make decisions about you.
Your data on your phone
My Duuka keeps your shop on the device so it works without internet. That copy lives in the app's private storage, which other apps cannot read. Your sign-in token and device secret are held in the phone's secure keystore.
Who else sees it
Nobody. We do not sell your data, we do not share it with advertisers, and we do not pass it to other companies for their own purposes. We use a hosting provider to run the service, which necessarily stores the data on our behalf and may not use it for anything else.
We will only disclose data if the law requires it, and we will tell you unless we are legally prevented from doing so.
How long we keep it
For as long as your shop exists. When you delete your account we remove your data as described on the deletion page. Backups roll off within 30 days.
Security
- All traffic between the app and our servers is encrypted (HTTPS).
- Passwords are hashed with Argon2id and can never be recovered, only reset.
- Sign-in tokens and device secrets are stored only as hashes on our side.
- Changing a password signs out every device on the shop, and we email you to say so.
Your rights
You can, at any time:
- See your data - it is all visible in the app.
- Correct it - edit it in the app.
- Delete it - see deleting your account and shop.
- Ask us for a copy, by writing to developers@sunactl.com.
Children
My Duuka is a business tool and is not intended for anyone under 18.
Changes to this policy
If we change it in a way that matters, we will tell you in the app or by email before it takes effect. The date at the top always shows the current version.
Contact
Sunac Technologies Ltd
Email: developers@sunactl.com
WhatsApp: +256 778 216 550