Privacy Policy

1. Introduction

SmartCunga, operated by Rwema Smart Group LTD ("we", "us", or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal and business information when you use our platform.

2. Information We Collect

Account information: Your name, email address, phone number, and business details (name, type, address, TIN) provided during registration.

Business data: Sales records, expenses, inventory, customer information, supplier information, purchase records, and financial data you enter into SmartCunga.

Payment information: Mobile Money transaction references and payment confirmations. We do not store your Mobile Money PIN or full payment credentials.

Usage data: Device type, browser, IP address, pages visited, and interaction patterns within the platform, collected automatically for service improvement.

3. How We Use Your Information

• To provide and maintain the SmartCunga platform.
• To process your transactions and manage your subscription.
• To generate receipts, reports, and financial summaries you request.
• To send important account notifications (plan expiry, password resets, security alerts).
• To improve platform performance and develop new features.
• To comply with legal and regulatory requirements, including RRA obligations.
• To detect and prevent fraud, abuse, and security incidents.

4. Data Ownership & Control

You retain full ownership of all business data you enter into SmartCunga. We act as a data processor on your behalf. You may export or delete your data at any time from within the platform. Upon account deletion, your data is permanently removed after a 30-day retention period.

5. Data Sharing

We do not sell, rent, or trade your personal or business data to third parties. We may share limited information only in the following cases:

• Service providers: Trusted infrastructure partners (e.g., Supabase for hosting, Vercel for deployment) who process data on our behalf under strict confidentiality agreements.
• Legal compliance: When required by Rwandan law, court order, or regulatory authority (e.g., RRA for tax compliance features you enable).
• Business transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred with prior notice.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/HTTPS), encrypted database storage, role-based access controls, and regular security audits. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active. After account deletion, data is permanently removed within 30 days. Backup copies may persist for up to 90 days in encrypted form before complete erasure.

8. Your Rights

• Access: View all your data within the platform at any time.
• Export: Download your business data in standard formats.
• Correction: Edit or update your information directly in the platform.
• Deletion: Request permanent deletion of your account and data.
• Portability: Export your data for use in other systems.

9. Cookies & Local Storage

SmartCunga uses essential cookies for authentication and session management. We also use browser local storage to remember your language preference and improve your experience. We do not use third-party advertising cookies or tracking pixels.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the platform or by email. Your continued use of SmartCunga after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at rwemasmartgroupltd@gmail.com or call +250 789 637 777.