Privacy Policy

Who is responsible for your data

For your own account and shop details, we are the data controller. For the customer records a shop keeps in nstore (for example, the names and phone numbers of people who buy on credit), the shop owner is the controller and we process that data on the shop's behalf.

What we collect

We only collect what the app needs to work:

• Account: your name, phone number (and email if you sign in with one), and a password. We never see your password; only a scrambled version is stored.
• Shop details: shop name, an optional address, and the Mobile Money number that MoMo sales are paid into.
• Staff: the name and phone number of staff that a shop owner invites.
• Shop records: products, prices, stock, sales, expenses, restocks, targets, and product photos you upload.
• Shop customers: the name, optional phone number, optional note, and debts that a shop records for its credit customers.
• Payments: when a customer pays by MoMo at the till, the phone number used for that payment. We do not store card details or MoMo PINs.
• Technical logs: our server keeps short-lived request logs (IP address, time, page requested) to keep the service secure and fix faults.

We do not use advertising, analytics or tracking tools, and we do not build profiles of you or sell your data.

Why we use it

• To create and secure your account, including sending sign-up and password-reset codes by SMS.
• To run the point of sale, stock, credit and reporting features you use.
• To take payment for subscriptions and to process MoMo sales at the till.
• To send service messages you have asked for, such as receipts and low-stock or end-of-day summaries.
• To keep the service secure, prevent fraud, and meet our legal obligations.

Our legal basis is the contract with you (providing the service you signed up for), our legitimate interest in running a secure service, and legal obligations such as tax records.

Who we share it with

We share data only with the service providers we need to run nstore, and only for that purpose:

• Supabase — database and sign-in.
• Render and Vercel — hosting for our server and website.
• Upstash — short-term caching.
• Cloudinary — storing product photos.
• Paystack — subscription payments and MoMo payments at the till.
• Our SMS provider (Arkesel or Moolre) — sending verification codes and staff invites.

Some of these providers store data on servers outside Ghana. We choose providers that protect data to a standard comparable to Ghanaian law. WhatsApp receipts and reminders are sent from your own WhatsApp app; nstore only prepares the message.

We will also disclose data if the law or a valid court order requires it.

Data on your phone

So you can sell without a signal, the app keeps a copy of your shop's products and any unsent sales on your device, and remembers your sign-in and display settings. See our Cookies Policy for details. Signing out removes your sign-in from the device.

How long we keep it

We keep your data while your account is open. If you ask us to close your account, we delete or anonymise your personal data within 30 days, except records we must keep by law (such as payment and tax records), which we keep only for as long as the law requires.

A shop owner can also delete a shop, with all its products, sales, customers and staff links, at any time from Settings → Delete this store.

Your rights

Under Act 843 you can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is wrong (most of it you can edit yourself in Settings);
• delete your data or close your account;
• stop using your data for a particular purpose.

Contact us by phone or WhatsApp on 055 031 8885 and we will respond within 21 days. If you are unhappy with our answer, you can complain to the Data Protection Commission of Ghana.

If you are a customer of a shop that uses nstore, please contact that shop first. We will help them respond.

Security

Data is encrypted in transit (HTTPS), access is limited by role within each shop, and each shop can only see its own records. No system is perfectly secure; if a breach affects you, we will tell you and the Data Protection Commission as the law requires.

Children

nstore is a business tool for adults. We do not knowingly collect data from anyone under 18.

Changes

If we change this policy in a way that matters, we will update the date above and tell you in the app before the change takes effect.

Contact

Questions or requests about your data: contact us by phone or WhatsApp on 055 031 8885.