Privacy Policy — Enz-Z Biashara
Effective date: 14 October 2026
This Privacy Policy explains what information the Enz-Z Biashara mobile app ("the app") collects, why we collect it, who we share it with, and the choices you have. The app is operated by Enzz Technologies Limited ("Enz-Z", "we", "us"), based in Kenya.
- App: Enz-Z Biashara (Android package
com.dukabunifu) - Website: https://enzz.co.ke
- Contact: support@enzz.co.ke
By creating an account or using the app you agree to this policy. If you do not agree, please do not use the app.
1. Who this policy covers
The app is a shop management tool for business owners and their employees. It is used to manage stock, record sales and expenses, track customer credit, handle orders, and produce reports.
This policy covers:
- Owners who create a business account.
- Employees who join a business using an owner key.
- Customers and suppliers of a business whose details an owner or employee types into the app (for example, the name of a customer who buys on credit).
- Customers who order from a business through Enz-Z Pata, our app for shoppers. Their order details reach the business in this app. Pata has its own privacy policy for shoppers.
2. Information we collect
2.1 Information you give us
| Information | Examples | When it is collected |
|---|---|---|
| Account details | Username, email address, password, phone number, role (owner or employee) | Sign-up and login |
| Business details | Business name, business type, county, sub-county, ward, KRA PIN | Owner sign-up and settings |
| Public shop profile | Tagline, description, mission, services, logo, banner and gallery images, videos, updates (title, text, photo), links to your public social media posts, opening hours, brand colour, year founded, delivery prices, WhatsApp number, Instagram, Facebook, TikTok and YouTube handles, website | When you set up or edit your shop profile |
| Shop location | Latitude and longitude of your shop | Only when you tap to set your shop location |
| Employee details | Employee email, username, phone number, job title, employment type, gender, salary, and notes the owner writes | When an owner adds or edits an employee |
| Chat and report destinations | The Telegram or WhatsApp account you link to the assistant, and the WhatsApp number or email address you choose for daily sales-check reports | When you connect a chat channel or switch on report delivery |
| Business records | Products, prices, stock levels, barcodes, sales, receipts, expenses, promotions, purchase orders, expired stock, tax summaries, audit reports | As you use the app |
| Customer and supplier details | Customer names on credit sales and orders, amounts owed and paid, supplier names and contact details | When you enter them |
| Files and photos you choose | Product photos, shop images, receipt photos, Excel inventory files, audit files | When you pick or capture them |
| AI assistant content | Questions and instructions you type or speak to the assistant, and the business data needed to answer them | When you use AI features |
Passwords are sent to our server over an encrypted connection and are used only to authenticate you.
2.2 Information we receive from your customers
When a shopper orders from your business through Enz-Z Pata, we pass the order to your business in this app. It includes the shopper's email address or phone number, the items ordered, whether they want pickup or delivery, and, for delivery, the address and note they typed. Shoppers can also rate and review your business; reviews are shown on your shop page without the shopper's name.
2.3 Information collected automatically
| Information | Purpose |
|---|---|
| Push notification token (Firebase Cloud Messaging) and platform (Android/iOS) | Sending order and account notifications to your device |
| Login session tokens | Keeping you signed in |
| Subscription and purchase status | Unlocking paid features |
| Network connection status | Working offline and syncing when you are back online |
| IP address and basic request data | Received by our servers and service providers whenever the app connects to them; used for security and to deliver the service |
| Android version | Read on your device to decide how exported files are saved. It is not sent to us. |
The app does not include advertising SDKs or third-party analytics SDKs, and it does not collect an advertising ID.
2.4 Device permissions
The app asks for a permission only when the feature that needs it is used. You can refuse any permission and still use the rest of the app.
| Permission | Why it is used |
|---|---|
| Camera | Scanning product barcodes and photographing receipts or products. Barcode scanning is processed on your device. |
| Microphone | Voice commands to the AI assistant. Speech is converted to text by your device's speech recognition service; the resulting text is sent to our server. The app does not store audio recordings. |
| Location (precise and approximate) | Setting your shop's position on a map for your shop profile. Location is read only when you tap to set it. The app does not track your location in the background. |
| Notifications | Alerting you to new orders and account events. |
| Biometrics (fingerprint or face) | Confirming it is you before sensitive actions. Biometric checks are done by your device; the app never receives or stores your biometric data. |
| Internet and network state | Connecting to our servers and detecting when you are offline. |
The app does not request access to your contacts, call logs, SMS, or your photo and media library. Photos, videos and files are chosen through the system picker, so the app only receives the items you select.
2.5 Information stored on your device
To work quickly and offline, the app keeps some data on your device: session tokens, your username and email, your theme and settings, a local copy of your product list, open orders, queued changes waiting to sync, and files you export (such as CSV reports). This data is removed when you uninstall the app or clear its storage.
3. How we use information
We use the information above to:
- create and secure your account and keep you signed in;
- provide the app's features: stock, sales, credit, orders, expenses, reports, tax summaries and audits;
- keep your data in sync between your devices and your employees' devices;
- provide AI features such as the assistant, receipt reading, voice replies, sales audits and marketing banner generation;
- display your public shop page, with the profile details listed above, to shoppers on Enz-Z Pata and to anyone who opens your shop link;
- pass customer orders to your business and let you and your employees prepare, deliver and complete them;
- answer you through Telegram or WhatsApp when you link one of them to the assistant, and send daily sales-check reports to the WhatsApp number or email address you choose;
- send notifications and emails about orders and your account, such as email verification and password reset;
- process subscriptions and unlock paid features;
- provide support, fix problems, and prevent fraud or misuse;
- comply with legal obligations.
We do not sell your personal information, and we do not use it for third-party advertising.
4. Legal basis
We process personal data under the Kenya Data Protection Act, 2019 on these bases: performance of our contract with you (providing the app), your consent (for example, device permissions and notifications), our legitimate interests (security and improving the service), and compliance with legal obligations.
5. Who we share information with
We share information only with service providers that help us run the app, and only as needed for the purposes below.
| Recipient | What is shared | Purpose |
|---|---|---|
Our backend servers (api.enzz.co.ke) | Account, business, and record data described above | Running the service |
| Google Firebase (Cloud Messaging) | Push notification token, notification content | Delivering notifications |
| Cloudinary | Images and videos you upload (product photos, shop logo, banner, gallery, update photos, shop videos) | Image and video storage and delivery |
| RevenueCat | App user identifier, purchase and subscription information | Managing subscriptions |
| Google Play Billing | Purchase information | Processing payments. We never receive your card or mobile money details. |
| AI service providers | Text you send to the assistant, receipt images, the business data needed to respond, and the reply text when you ask for it to be read aloud | Providing AI features, including voice replies, on our behalf |
| Telegram and WhatsApp (Meta) | Your messages to the assistant and its replies, and sales-check reports you ask us to send | Only if you link a chat channel or switch on report delivery |
| Email delivery provider | Your email address and the content of the email | Sending verification, password reset and report emails |
| Google Fonts | IP address | Downloading the app's fonts the first time they are needed |
| Your device's speech recognition service (for example, Google) | Your voice while you are speaking a command | Converting speech to text |
| OpenStreetMap | IP address and the map area being viewed | Showing the map when you set your shop location |
Information is also shared:
- Within your business. Owners can see the records and activity of their employees, and employees can see the business data their role allows.
- Publicly, when you choose. Everything in your shop profile (name, description, images, videos, updates, opening hours, delivery prices, contact handles, phone number, location) and your products, prices and promotions are shown to shoppers in the Enz-Z Pata app and website, and to anyone who has your shop link.
- Social media posts you pick. When you add a link to one of your public posts on Facebook, Instagram, TikTok or YouTube, shoppers see it in that platform's own player on your shop page. The platform then receives the shopper's request and applies its own privacy policy. We do not connect to your social media accounts and never receive your passwords for them.
- When you export or share. Reports, receipts and CSV files you share go to whichever app or person you choose.
- When required by law, or to protect the rights, safety and property of our users or ourselves.
- In a business transfer, such as a merger or sale, in which case this policy continues to apply to your data.
6. Customer, supplier and employee information
When you record details about your own customers, suppliers or employees (including an employee's salary or gender), you are responsible for having the right to do so and for telling them how their information is used. We process that information only to provide the app to you.
Order details you receive from Pata shoppers (contact, delivery address and note) are given to you only to fulfil that order. Do not use them for anything else without the shopper's agreement.
7. Security
Data sent between the app and our servers is encrypted in transit using HTTPS. Access to accounts is protected by passwords and session tokens, and owners can require biometric confirmation for sensitive actions. No system is completely secure, so please use a strong password and keep your owner key private.
8. How long we keep information
We keep your information for as long as your account is active. When you delete your account, your account and business data are deleted from our active systems. We may keep limited records for longer where the law requires it (for example, tax or financial records) or to resolve disputes, and backups are overwritten on a rolling schedule.
9. Your choices and rights
You can:
- Access and correct your account, business and shop profile details in the app.
- Delete your account in the app under Settings → Delete Account. This permanently deletes your account and its business data.
- Suspend your account in the app under Settings.
- Request deletion without the app by emailing support@enzz.co.ke from your registered email address.
- Withdraw permissions at any time in your device settings.
- Turn off notifications in your device settings.
- Cancel a subscription in your Google Play account.
Under the Kenya Data Protection Act, 2019 you also have the right to be informed about how your data is used, to access it, to object to or restrict processing, to have inaccurate data corrected, to have data erased, and to receive your data in a portable format. To use any of these rights, contact support@enzz.co.ke. We respond within 30 days.
You may also lodge a complaint with the Office of the Data Protection Commissioner of Kenya (https://www.odpc.go.ke).
10. International transfers
Some of our service providers store or process data outside Kenya. Where this happens, we rely on safeguards permitted under the Kenya Data Protection Act, 2019.
11. Children
The app is intended for business use by adults. It is not directed at anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. We will change the effective date above and, for significant changes, notify you in the app or by email. Continuing to use the app after a change means you accept the updated policy.
13. Contact us
Enzz Technologies Limited Email: support@enzz.co.ke Website: https://enzz.co.ke