Last updated: January 2026. This policy explains how Josmart Technologies collects, uses, and protects your personal information.
We collect information to provide and improve our services. The types of information we gather include:
When you create an account, request a demo, or contact us, we may collect:
We automatically collect information about how you interact with our services, including:
We collect information about the devices you use to access our services:
We use the information we collect for the following purposes:
To operate, maintain, and deliver the features of DukaDesk POS and SmartPOS, including processing transactions, managing inventory, and providing real-time analytics.
To send you important updates about your account, service changes, security alerts, and promotional communications. You may opt out of marketing communications at any time.
To understand how users interact with our products, identify areas for improvement, develop new features, and conduct research and analytics.
To detect, prevent, and address fraud, unauthorized access, and other malicious activity. To protect the safety and security of our users and the public.
We do not sell your personal information. We may share your information in the following circumstances:
We share information with trusted third-party vendors who perform services on our behalf, such as payment processing (including M-Pesa integration), cloud hosting, analytics, and customer support. These providers are contractually obligated to protect your data and use it only for the services we request.
We may disclose your information if required to do so by law, or in response to valid requests by public authorities (e.g., a court order or government agency request) within the jurisdiction of Kenya.
In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.
We implement industry-standard security measures to protect your personal information:
All data transmitted between your devices and our servers is encrypted using TLS 1.2 or higher. Sensitive data at rest is encrypted using AES-256 encryption.
Access to personal information is strictly limited to authorized personnel who need it to perform their job functions. We enforce role-based access controls and multi-factor authentication for internal systems.
We conduct regular security audits, vulnerability assessments, and penetration testing to identify and address potential risks. Our infrastructure is monitored 24/7 for suspicious activity.
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We encourage you to take precautions to protect your own data, including using strong passwords and keeping your account credentials confidential.
You have the following rights regarding your personal information:
You may request a copy of the personal information we hold about you. We will provide this information within a reasonable timeframe.
You may request that we correct any inaccurate or incomplete personal information we hold about you.
You may request that we delete your personal information, subject to certain legal exceptions such as regulatory record-keeping requirements.
You may request to receive your data in a structured, commonly used, and machine-readable format, and request that we transmit it to another service provider where technically feasible.
To exercise any of these rights, please contact us at contact@josmart.co.ke.
We use cookies and similar tracking technologies to enhance your experience on our website:
Required for the website to function properly, including session management and security features.
Help us understand how visitors interact with our website by collecting and reporting information anonymously.
Allow the website to remember choices you make, such as your language preference or region.
You can control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of our services.
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at contact@josmart.co.ke.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you through the application, via email, or by posting a prominent notice on our website.
We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes your acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: