Last updated: August 2025

Privacy Policy

1. Who we are

My Duka ("we", "our", "us") operates the My Duka platform, an AI-powered WhatsApp sales assistant for businesses. Our registered business contact is business@my-duka.com.

2. Information we collect

We collect information you provide directly, including:

  • Account details: name, email address, phone number
  • Business information: shop name, product catalog
  • Payment details: M-Pesa transaction references (we do not store card numbers)
  • WhatsApp conversation data: messages your customers send to your connected WhatsApp number
  • Usage data: how you interact with the dashboard

3. How we use your information

  • To provide and operate the My Duka service
  • To process payments via M-Pesa
  • To train and improve our AI responses for your specific business
  • To send you service-related communications
  • To comply with legal obligations

4. Data sharing

We do not sell your personal data. We share data only with:

  • Service providers who help us operate the platform (hosting, analytics)
  • Safaricom for M-Pesa payment processing
  • Law enforcement when required by Kenyan law

5. Data retention

We retain your data for as long as your account is active. After account deletion, we delete or anonymise your data within 30 days, except where retention is required by law.

6. Your rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at business@my-duka.com.

7. Security

We use industry-standard encryption and security practices to protect your data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or via the dashboard.

9. Contact

Questions about this policy? Email us at business@my-duka.com.