Inrema Privacy Policy

1. Introduction

Inrema ("we", "our", "us") is an invoice and receipt management application designed for small businesses in East Africa. This privacy policy explains how we collect, use, store, and protect your personal information when you use our mobile application and related services.

By using Inrema, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you register or are invited as a staff member, we collect:

• Business name
• Full name
• Email address
• Phone number (optional)
• Business address (optional)
• Password (stored securely using encryption)

2.2 Business Data

In the course of using the app, you provide:

• Customer names, email addresses, and phone numbers
• Product and service catalog details (names, prices, stock levels)
• Invoice details (amounts, dates, line items, notes)
• Payment records (amounts, methods, dates)
• Business logo (if uploaded)

2.3 Automatically Collected Information

• Device type and operating system version
• App version
• Error logs and crash reports (for improving app stability)

We do not collect location data, contacts, or any data from other apps on your device.

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the Inrema service
• Create and manage your account
• Generate, send, and manage invoices and receipts
• Send invoices to your customers via email or SMS on your behalf
• Generate PDF invoices and receipts
• Track payments and calculate staff commissions
• Display business insights and reports
• Improve and optimize the application
• Communicate with you about service updates

4. Data Sharing

We do not sell your personal information to third parties.

We may share limited data with:

• Africa's Talking — to deliver SMS messages to your customers when you send invoices via SMS. Only the recipient phone number and message content are shared.
• Email service providers — to deliver invoice emails to your customers on your behalf.
• Hosting providers — our servers are hosted on secure cloud infrastructure. Your data is stored on these servers as part of normal service operation.

We will share information if required by law or to protect the safety of our users.

5. Data Storage and Security

Your data is stored on secure cloud servers. We implement appropriate security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Secure password hashing
• JWT-based authentication with token expiration
• Role-based access control (Merchant and Staff roles)

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

You have the right to:

• Access your personal data through the app
• Update your profile information at any time
• Delete your account and associated data by contacting us
• Export your invoice data as PDF documents

Staff accounts can be removed by the merchant who created them. When a staff account is removed, the staff member's personal data is deleted, but invoices they created remain for business record-keeping.

7. Data Retention

We retain your data for as long as your account is active. If you request account deletion:

• Personal account information is deleted within 30 days
• Business records (invoices, payments) may be retained for legal and accounting compliance purposes

8. Children's Privacy

Inrema is a business tool and is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.