My Shop

DukaNow Back to app

Privacy Policy

Last updated: 16 August 2026

This Privacy Policy explains how ARTOTECH SOLUTIONS LIMITED ("we", "us", "our") collects, uses, and protects personal information when you use DukaNow (the "Service"). We are committed to handling your data responsibly and in line with the Personal Data Protection Act, 2022 of the United Republic of Tanzania.

1. Information we collect

  • Account information — your name, email address, phone number, and a securely hashed password when you register.
  • Shop information — data you enter to run your shop: products, prices, stock movements, sales, expenses, purchases, and suppliers.
  • Customer information you enter — where you record a customer (for example for credit / "deni"), this may include their name and phone number. You are responsible for having a lawful basis to enter this.
  • Payment information — when a mobile-money payment is requested through the Service, we and our payment provider process the payer's phone number and the transaction details needed to complete and confirm the payment.
  • Technical information — limited diagnostic data (such as error reports) and anti-abuse checks used to keep the Service secure and working.

2. How we use your information

  • To provide and operate the Service and your shop's records.
  • To process and confirm mobile-money payments you request.
  • To keep the Service secure and prevent fraud and abuse.
  • To provide support and to communicate with you about the Service.

We do not sell your personal information.

3. Where your data is stored

DukaNow is an offline-first app. Your shop's data is stored both on your device (so the app works without internet) and in a secure cloud database, so it is backed up and can sync across your devices.

Our cloud database and application servers are operated by international providers, and your data is therefore stored and processed outside the United Republic of Tanzania — currently on servers located in India (database hosting) and on a global content-delivery network (application hosting). Where personal information is transferred outside Tanzania, we take reasonable steps to ensure it remains protected to a standard consistent with the Personal Data Protection Act, 2022, including contractual safeguards with our providers, encryption in transit, and access controls that limit who can reach your data.

4. Service providers we share data with

We share limited data only with providers that help us run the Service, and only as needed:

  • Payment provider — to process the mobile-money payments you request. Payments are settled directly to the receiving shop's own mobile-money account; DukaNow does not hold your customers' funds.
  • Cloud database hosting (Turso) — to securely store and sync your shop's data.
  • Application hosting (Cloudflare) — to serve the app and protect it from abuse.
  • Error monitoring (Sentry) — to detect and fix technical problems.
  • Sign-in protection (Cloudflare Turnstile) — to tell real users from automated attacks.
  • Email delivery (Brevo) — to send account emails such as password resets.

We share only what each provider needs to perform its function, and we do not authorise them to use your information for their own purposes.

5. Data retention

We keep your information for as long as your account is active or as needed to provide the Service, and thereafter only as required to comply with our legal obligations or resolve disputes.

6. Your rights

You may request access to, correction of, or deletion of your personal information, and you may ask us questions about how we handle it. To make a request, contact us using the details below.

7. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above shows when it was last changed.

8. Contact us

ARTOTECH SOLUTIONS LIMITED
Ushirika, Moshi, Tanzania
Phone: +255 743 119 024
Email: dukanowapp@gmail.com