Privacy Policy

Dodo SBS Limited ("we", "us", or "our") operates the Meku Business mobile application (Android) and the web platform at merchant.meku.co.tz (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, with whom we share it, and your rights regarding that information.

By creating an account or using the Service, you agree to this Privacy Policy.

1. Information We Collect

Account Information

When you register, we collect your name, email address, phone number, and business name. This information is required to create and secure your account.

Business Data

To provide the Service, we store data you enter, including products, inventory levels, prices, categories, purchase orders, expenses, supplier details, customer contacts, and debt records. This data belongs to you and is kept strictly within your account.

Transaction Data

We record sales, payment methods (cash, mobile money, credit, invoice), amounts in Tanzanian Shillings (TZS), and associated receipt information. This data is necessary to provide POS, analytics, and earnings features.

Usage and Device Data

We collect information about how you interact with the Service, including pages visited, features used, error logs, device type, operating system version, and IP address. This helps us improve performance and troubleshoot issues.

Location Data

If you use delivery or pickup features, we collect your business pickup address. We do not continuously track your device location.

2. How We Use Your Information

• Provide, maintain, and improve the Service
• Process sales, record inventory changes, and generate receipts
• Send transactional SMS notifications (e.g. debt reminders, OTP codes)
• Send invoice emails with PDF attachments
• Generate analytics and business reports for your account
• Process subscription payments and issue invoices
• Coordinate deliveries with third-party providers
• Detect and prevent fraud, abuse, or security incidents
• Comply with applicable Tanzanian laws and regulations

We do not sell your personal data to third parties. We do not use your business data for advertising purposes.

3. Sharing Your Information

We share data only as necessary to provide the Service:

• Selcom — payment processing for subscription upgrades and marketplace transactions. Selcom receives payment details required to complete transactions.
• Dodo Delivery — when you or your customers request a delivery, we share the order details and delivery address with Dodo Delivery to fulfil the request.
• Beem Africa — SMS delivery service used for OTP verification and debt reminder notifications. Phone numbers are transmitted to Beem to send SMS messages.
• Cloudflare R2 — object storage for product images, documents, and other uploaded files. Files are stored in Cloudflare's infrastructure and served via our CDN at s3.meku.co.tz.

Each third party is bound by their own privacy policies and data processing agreements. We do not share data with any other third parties without your explicit consent, except where required by law.

4. Data Storage and Security

Your data is stored on servers managed by Dodo SBS Limited and our cloud infrastructure providers. We apply industry-standard security measures including:

• Encrypted connections (TLS) for all data in transit
• Encrypted storage for sensitive credentials and keys
• Row-level security (RLS) in our database ensuring your data is isolated from other tenants
• Regular backups and access controls restricted to authorised personnel

No system is completely secure. If you believe your account has been compromised, contact us immediately at support@meku.co.tz.

5. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update inaccurate or incomplete information via your account settings
• Deletion — request deletion of your account and associated data (see our Data Deletion Policy)
• Portability — request an export of your business data in a machine-readable format
• Objection — object to processing of your data where we rely on legitimate interest

To exercise any of these rights, email us at support@meku.co.tz with the subject line "Data Request". We will respond within 30 days.

6. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription and request account deletion, we will delete your personal and business data within 30 days, except where we are required to retain records by Tanzanian law (for example, financial transaction records may be retained for up to 7 years to comply with tax and accounting regulations).

7. Children's Privacy

The Service is intended for business owners and their staff. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or via an in-app notice at least 14 days before the changes take effect. The effective date at the top of this page will always reflect the most recent version.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact: