Privacy Policy

Last Updated: August 2026

1. Introduction

Tilliza POS is a product of danaleko.com. This Privacy Policy explains how Tilliza collects, uses, discloses, stores, shares, and protects personal data in accordance with the Kenya Data Protection Act, 2019 when users access or use the Tilliza Point of Sale (POS) software and related services.

Tilliza is committed to protecting the privacy and personal data of its users, clients, and partners. By purchasing, downloading, or using Tilliza POS or any of our cloud-sync platforms, you acknowledge and accept the practices described in this Privacy Policy.

2. Who We Are

Tilliza provides retail management software, Point of Sale (POS) systems, inventory tracking, and related digital technology services to businesses, supermarkets, and retail stores.

For purposes of applicable data protection law, Tilliza acts primarily as a Data Controller regarding our direct clients (business owners), and as a Data Processor where POS services and cloud backups are provided strictly on the documented instructions of our clients.

3. Personal Data We Collect

Depending on whether you use the software in offline mode or utilize our cloud-sync features, we may collect and process the following categories of personal data:

  • Names (of store owners, employees, and retail customers)
  • Mobile phone numbers and email addresses
  • User account details and store profiles
  • Employee login credentials and secure role PINs
  • Transaction records, sales histories, and billing/invoicing data
  • Retail customer CRM data (loyalty points, purchase history, and outstanding balances)
  • IP addresses, device information, and system access logs (for cloud-sync users)
  • Customer support and correspondence records

4. Categories of Data Subjects

The personal data we process relates to:

  • Business clients (store owners and account holders)
  • Authorized software users (store managers, cashiers, and administrators)
  • End consumers (retail shoppers whose details are logged into the POS by the business)
  • Technical administrators and support staff

5. Purpose of Processing

Personal data is processed for the following purposes:

  • Provision, operation, and management of the Tilliza POS software.
  • Secure data synchronization, cloud backups, and multi-branch management.
  • Sales tracking, receipt generation, and inventory management.
  • Administration of customer loyalty programs and store credit tracking.
  • Fraud detection, loss prevention (e.g., tracking cash drawer activity), and platform security.
  • Billing, invoicing, and account administration for our software licenses.
  • Customer support, troubleshooting, and dispute resolution.
  • Compliance with legal, regulatory, and contractual obligations.

6. Lawful Basis for Processing

We process personal data based on one or more of the following lawful bases:

  • Performance of a contract (delivering the POS software functionality).
  • Consent of the data subject where applicable.
  • Compliance with legal or regulatory obligations.
  • Legitimate business interests, including system integrity, security, and fraud prevention.

7. Source of Personal Data

Personal data is obtained from:

  • Clients during the purchase, onboarding, and setup of the software.
  • Clients and their employees acting as data controllers who input retail data (sales, customer info, inventory) directly into the POS system.
  • System-generated data arising from daily software usage, hardware interactions, and transactions.

8. Data Sharing and Disclosure

Personal data may be shared with:

  • Secure cloud hosting and infrastructure providers (strictly for data backup and cross-device syncing).
  • Payment processors and telecommunications operators (e.g., M-Pesa integrations) strictly for transaction facilitation.
  • Regulatory authorities where disclosure is required by law.
  • Third-party service providers engaged under appropriate data processing agreements.

Tilliza does not sell personal data, nor do we share it for unsolicited marketing purposes.

9. Local vs. Cloud Storage and Cross-Border Transfers

  • Offline Mode: If the POS is used strictly offline, business and customer data remains entirely on the client's local hardware. Tilliza does not transmit or access this local data.
  • Cloud Mode: For users utilizing cloud-sync, data is securely transmitted and stored. Personal data is primarily processed and stored within Kenya. Where cross-border access or transfers occur for secure infrastructure hosting or technical support, appropriate safeguards are implemented in line with applicable data protection legislation.

10. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory requirements, resolve disputes, and maintain audit trails. If a client terminates their license or requests account deletion, associated cloud data will be securely purged in accordance with our internal retention schedules.

11. Data Security

Tilliza implements appropriate technical and organizational measures to safeguard personal data, including:

  • Role-based access controls (e.g., Admin vs. Cashier permissions)
  • Authentication and secure PIN mechanisms
  • Secure cloud hosting environments with encrypted data transmission
  • System monitoring and audit logging (tracking voids and cash drawer events)
  • Periodic access reviews and incident response procedures

12. Data Subject Rights

Data subjects have the right to:

  • Access their personal data
  • Request correction of inaccurate or incomplete data
  • Request deletion of personal data where applicable
  • Object to or restrict processing
  • Withdraw consent where processing is based on consent

Requests may be submitted using the contact details below.

13. Complaints

Data subjects may raise concerns or complaints directly with Tilliza. They also retain the right to lodge a complaint with the Office of the Data Protection Commissioner.

14. Contact Information

For inquiries, requests, or concerns relating to this Privacy Policy or personal data processing, contact:

Tilliza (A product of danaleko.com)
Email: danaleko3@gmail.com
Address: Nairobi, Kenya

15. Changes to This Policy

This Privacy Policy may be updated periodically to reflect software updates or legal changes. Updated versions will be made available through our platforms or upon request.