HOW WE HANDLE YOUR DATA

Privacy Policy

Last updated: [[LAST_UPDATED]]  ·  Applies to Rekodi, the WhatsApp business-records service.

This policy is written against what Rekodi actually does — the data it really stores and the services it really sends it to — not a template. If anything here is unclear, ask us before you rely on it.

Rekodi is in testing Rekodi is currently in testing with a small number of businesses. We are the data controller for the account information of shop owners who sign up, and a data processor acting on a shop's behalf for the business records they enter. Registration with Kenya's Office of the Data Protection Commissioner (ODPC) will be completed before commercial launch.

01What we collect

When you use Rekodi, we hold the following. We have listed it plainly, because some of it may be more than you expect.

Your account

  • Your business name, your own name, and where you trade — including, if you provide it, the approximate GPS location of the business.
  • Your personal WhatsApp number (the one you manage the shop from) and your business WhatsApp number.
  • Your subscription plan and status.
  • If you connect M-Pesa/Daraja, your till or shortcode and API credentials. These are encrypted at rest and used only to act on your instructions.

The records you enter

  • Sales, purchases, expenses, stock movements and the resulting ledger and financial statements.
  • Products and services, their prices and stock levels.
  • Bank/cash account labels and account numbers you add (labels only — Rekodi has no bank connection).
  • If you manage property: properties, units and rent amounts.

People you record

  • Customers and suppliers you track on credit (deni): their name, an optional phone number, and their running balance.
  • Staff you add: their name, WhatsApp number, role and commission rate.
  • For deliveries or orders: a customer's name, phone number and delivery address.
  • Landlords or tenants, where you use Rekodi for rent.

Your messages and media

  • The content of the WhatsApp messages you send Rekodi, and the replies it sends you, are logged and kept.
  • If you send a voice note or an image, it is processed to understand it (see the next section).

02How your messages are processed

To understand a message written in ordinary language, Rekodi sends its content to a third-party AI provider in the United States (OpenAI), which interprets it and returns a structured result:

  • Text messages are sent to OpenAI's language models for interpretation.
  • Voice notes are sent to OpenAI for transcription, then interpreted.
  • Images you send are processed by OpenAI to read them.

This means the content of what you text — which can include the names and phone numbers of your customers and staff — leaves our server and is processed by this provider. We send only what is needed to interpret the message. We do not sell your data or use it for advertising. The provider processes it under its business terms, which govern retention: [[OPENAI_TIER_AND_RETENTION]].

Flag for review Fill [[OPENAI_TIER_AND_RETENTION]] with the exact OpenAI product tier and its stated data-retention period before this page is published. Do not guess these in a document a reviewer may read.

03Why we use it & lawful basis

We process this data to provide the service you asked for: to record your transactions, keep your books, answer your questions, and manage your subscription. Under Kenya's Data Protection Act, 2019, our lawful bases are:

  • Performance of a contract — to deliver the service to you, the account holder.
  • Legitimate interests — to keep the service secure, prevent abuse, and improve reliability.
  • Consent — where you choose to connect an optional integration such as M-Pesa.

For the records you enter about other people, you are the party with the direct relationship, and Rekodi processes that data on your behalf (see section 07).

04Where it is stored

Your data is stored on servers operated by DigitalOcean in Frankfurt, Germany (region fra1). Because interpreting your messages uses OpenAI (section 02), some message content is also processed in the United States. By using Rekodi you understand that your data is transferred and processed outside Kenya for these purposes.

We take encrypted daily backups of the database, and we have tested that a backup actually restores correctly to the last cent. [[FLAG: off-site backup storage is being finalised — update this line to state the off-site location and encryption once it is live; do not claim off-site storage until then.]]

05Who can access it

Access is limited to what the service needs:

  • You and the staff you authorise. Rekodi has roles (owner, manager, cashier, viewer); a cashier, for example, can record sales but cannot see the shop's financials.
  • Us, as the operator. To run and support the service and fix problems, our operator can access the database. We access your records only when needed to operate or support Rekodi, or where the law requires it.
  • Our service providers — DigitalOcean (hosting), OpenAI (message interpretation), and Meta/WhatsApp (message delivery) — acting under their terms.

06How long we keep it

We keep your records for as long as your shop uses Rekodi, so your books stay complete and correct over time. At present, the log of your WhatsApp messages is retained indefinitely. We intend to introduce a defined retention period after which older message logs are removed, and we will state that period here once it is in place.

If your subscription lapses, your data is not deleted — it is kept so you don't lose your books, and is available again when you resubscribe. If you ask us to delete your shop, we will (see section 08).

07Data about other people

When you record a customer's debt, a staff member's number, or a delivery address, you are entering personal data about someone who has not signed up to Rekodi themselves and has not directly agreed to this policy. This is a real responsibility under the Data Protection Act, 2019, and most services quietly ignore it.

As the shop owner, you are responsible for having a proper reason to hold that information — normally your own business relationship with that person. Rekodi acts as your processor for it.

If someone whose data a shop holds in Rekodi wants it removed, they can ask the shop owner, or contact us at [[CONTACT_EMAIL]] and we will help the shop owner remove it. We can delete an individual customer, supplier or staff record on request.

08Your choices & requests

Under the Data Protection Act, 2019 you can ask to access, correct, export or delete your data. Today these are handled by request rather than a self-service button:

  • Export. Kamili shops can export reports in the product. For a full copy of your data, contact us and we will provide it.
  • Deletion. Contact us and we will delete your shop and all data associated with it. This is permanent.
  • Correction. You can correct records directly in Rekodi, or ask us for help.

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.

09Security

  • All traffic to Rekodi is over HTTPS.
  • Sensitive credentials — your WhatsApp access token and any M-Pesa/Daraja keys — are encrypted at rest.
  • The database is backed up daily, encrypted, and the restore has been tested.
  • Access is role-based, and message webhooks are protected against duplicate and replayed requests.

No system is perfectly secure, but we take reasonable steps appropriate to a service holding financial records.

10Changes & contact

We will update this policy as Rekodi grows — particularly as we complete ODPC registration and finalise our providers. When we make a material change, we will update the date at the top and, where appropriate, tell you on WhatsApp.

For any privacy question or request, contact the data controller:

  • WhatsApp: [[CONTACT_NUMBER]]
  • Email: [[CONTACT_EMAIL]]
  • Registered address: [[REGISTERED_ADDRESS]]
  • Business registration no.: [[BUSINESS_REG_NO]]