Delete your data

What you can remove yourself, in the app

Your own profile details — name, phone number and branch: open Profile, then Edit profile, and change or clear them.

Menu items and categories: open Menu, then Manage. Items that have never been sold are deleted outright. An item that appears on a past order is removed from your menu but the order line is kept, because deleting it would change the totals of orders you have already been paid for.

Orders: an unpaid order can be cancelled from the order screen. Cancelled orders stay in your history rather than disappearing, so your figures stay auditable.

How to ask us to remove anything else

Email karibupos@gmail.com from the email address on your Karibu POS account, with the subject line "Delete my data".

Tell us what you want removed — for example a specific customer credit record, a staff member's account, or a particular field on your profile. The more specific you are, the faster we can act.

We may ask you to verify your identity before we act, which protects your account against someone else requesting deletion of your records.

We complete verified requests within thirty (30) days, and will tell you if any part of the request falls under the retained categories below.

You can also reach us from inside the app: Profile, then Help & Support.

Customer records you hold

Credit records you record about your own customers — a name, phone number and amount owed — belong to you, not to us. You are the data controller for them and we hold them on your behalf.

If one of your customers asks you to remove their details, email us and we will remove the record for you. If you are a customer of a restaurant using Karibu POS, please contact that restaurant directly — they decide what happens to their own records.

What we must keep, and for how long

Some records cannot be removed on request, because Kenyan law requires us to hold them:

• Financial and transaction records — subscription payments, receipts, and payments recorded against orders — are kept for five (5) years, as required by Kenyan tax and accounting law.
• Security and audit logs are kept for five (5) months, then deleted. They record events such as sign-in attempts and administrative actions, and exist to protect every account against unauthorised access.
• Anonymised statistics are kept indefinitely, as they cannot identify you or your business.

Everything outside those categories is deleted within thirty (30) days of a verified request.

Your rights

Under Kenya's Data Protection Act, 2019 you may access the data we hold about you, have inaccurate data corrected, have data deleted where there is no good reason for us to keep it, and receive your data in a portable format. Our full Privacy Policy sets these out.

If you are unhappy with our response you may complain to the Office of the Data Protection Commissioner of Kenya.

Contact

Karibu POS — karibupos@gmail.com