Privacy Policy

This Privacy Policy explains how Kurasika (“we”, “us”, “our”) collects, uses, stores, and shares information when you use ShaSha (the ShaSha POS mobile apps, admin portal, agent tools, and related websites), including shasha.kurasika.tech and our backend services at backshasha.kurasika.tech.

ShaSha is a point-of-sale and merchant financing platform for tuckshops and small retailers. By using ShaSha, you agree to this Policy.

1. Who we are

ShaSha is operated by Kurasika. For privacy questions, contact us using the details in section 12.

2. Information we collect

2.1 Account and identity information

• Name, username, email address (where provided)
• Phone number (used for merchant sign-in and activation)
• Activation / sign-in codes
• Role (for example shop owner, employee/cashier, agent, or admin)
• Shop / business details such as shop name, address, country, and contact details

2.2 Business and transaction information

• Sales, refunds, products, catalogue items, stock, expenses, and related receipts
• Payment method details recorded for a sale (for example cash or mobile money)
• Stock-credit / loan applications, balances, repayment history, and EcoCash payment claims submitted for review
• Employee accounts created by a shop owner (name and PIN-related credentials as needed to operate the till)
• Optional customer phone numbers or loyalty information if a merchant chooses to use those features

2.3 Device and technical information

• Device type, operating system, app version, and approximate diagnostics needed to keep the service working
• IP address and basic server logs when you access our websites or APIs
• Local app preferences (for example theme or last sync state) stored on your device
• Offline sales queues and similar on-device data until they sync to our servers

2.4 Photos and media

If you upload product images or similar media, those files are stored so your shop catalogue and POS screens can display them.

2.5 Communications

• Messages you send through contact forms or support channels
• SMS or similar messages we send for account activation and important service notices

3. How we use information

We use the information above to:

• Create and secure accounts, authenticate users, and manage shops and staff
• Operate POS features (selling, refunds, inventory, reporting, offline sync)
• Provide stock credit / merchant financing, review EcoCash payment claims, and manage repayments
• Send activation codes and essential service communications
• Improve reliability, prevent fraud or abuse, and troubleshoot issues
• Comply with legal obligations and enforce our terms

We do not sell your personal information. We do not use ShaSha data for third-party advertising tracking.

4. Legal bases

Where applicable, we process information because:

• It is needed to provide the ShaSha service you requested (contract / service delivery)
• We have a legitimate interest in securing, operating, and improving the platform
• You have given consent where required (for example optional communications)
• We need to meet legal or regulatory requirements

5. How we share information

We may share information with:

• Service providers who host our servers, send SMS, process email, or help us operate the platform, under appropriate confidentiality obligations
• Payment / mobile-money partners when needed to support EcoCash or similar repayment flows (for example destination account details you are instructed to pay, and payment references you submit)
• App platforms such as Apple App Store and Google Play, according to their terms when you download or update ShaSha
• Professional advisers or authorities when required by law, or to protect rights, safety, and security

Shop owners control staff access within their shop. Admins and authorised Kurasika staff may access merchant data as needed to provide support, review financing, and operate the service.

6. Data storage and security

We store ShaSha data on secured servers and use reasonable technical and organisational measures to protect it (including access controls and encrypted transport via HTTPS). No method of transmission or storage is 100% secure, but we work to protect your information against unauthorised access, loss, or misuse.

7. Data retention

We keep account, shop, and transaction records for as long as needed to provide ShaSha, meet accounting/financing needs, resolve disputes, and comply with law. When information is no longer required, we delete or anonymise it where practical.

8. Your choices and rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you
• Ask us to correct inaccurate information
• Ask us to delete information, subject to legal or operational retention needs
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

Shop owners can update many shop and staff details inside the app or admin portal. For other requests, contact us using section 12. We may need to verify your identity before fulfilling a request.

9. Children’s privacy

ShaSha is built for business use. It is not directed at children under 16, and we do not knowingly collect personal information from children for ShaSha accounts.

10. International users

ShaSha is designed primarily for merchants in Zimbabwe and other markets we support. If you access ShaSha from another country, your information may be processed in countries where we or our service providers operate.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version at this URL and revise the “Last updated” date. Continued use of ShaSha after changes means you accept the updated Policy.

12. Contact us