Privacy Policy

1. Who we are

Kaydro is a product of Sahal Global (SGI), Garowe, Puntland, Somalia. In this policy “we” and “us” mean SGI, and “you” means the business that holds a Kaydro account and the people who sign in to it.

2. The two kinds of information in Kaydro

Keeping these apart is the whole of this policy, so we say it plainly:

• Your business records — the sales, stock, customers and deyn, suppliers, staff, expenses and accounts you enter or that Kaydro produces from them. This is your data. We store and process it on your behalf so the service works, and for no other purpose.
• Your account information — what we need to give you an account and support it: name, phone number, email address, business name, city and type of business, your role, and a securely hashed password. We never store your password in a readable form.

3. What else we collect

• Technical records — pages visited, approximate device and browser, and error reports. We use these to keep the service working and to see which parts of Kaydro are actually used.
• Vehicle location — only for businesses using Kaydro Track, and only from tracking devices they have fitted to their own vehicles: position, speed, trips and alerts.
• An activity trail — Kaydro records who did what and when for actions that affect money or access. This protects you: it is what settles a disagreement about who changed a price or voided a sale.

4. Information you hold about other people

When you record a customer's phone number and their deyn, admit a student, or add an employee, you decide what is collected and why. In that relationship you are responsible for those people's information and for telling them how you use it; we act on your instructions and hold it for you.

Two cases deserve particular care, and the responsibility for both rests with you: students, whose records must be held with the knowledge and consent of a parent or guardian, and drivers, who should be told when a vehicle they operate is tracked.

5. What we do with it

We use information to run Kaydro for you, and specifically to:

• provide the service — the till, the books, the reports and the reminders you send;
• answer your support requests and fix problems you report;
• handle subscriptions, invoices and renewals;
• keep the service secure, and investigate abuse or suspected fraud;
• understand which features are used, so we improve the right things.

And what we never do:

• we do not sell your information, to anyone, for any price;
• we do not use your business records to advertise to you or to anyone else;
• we do not let one company see another company's data.

6. Keeping companies apart

Kaydro serves many businesses from one system, and separation is enforced in the software itself rather than only in the screens: every record carries the company it belongs to, and every query is limited to the company you signed in to. Inside your own company, what each person can see is decided by the role you give them — a cashier does not see the profit report unless you allow it.

7. Who else may see information

We share only what a job requires, and only with:

• our hosting provider, which runs the servers Kaydro sits on;
• messaging providers, when you send a customer an SMS or WhatsApp reminder — they receive that message and that number in order to deliver it;
• our email provider, for account emails such as password resets;
• the authorities, where the law requires it of us.

If you work with an SGI partner or reseller, they can see that you signed up through them and whether your subscription is active. They cannot see inside your books.

8. Where it is kept, and for how long

Your data is held on servers we control, and backed up nightly so that a failure or a mistake does not cost you your records. Backups are kept for a limited period and then overwritten.

Vehicle positions are kept in full for about 30 days, after which older tracks are thinned to a lower frequency — enough to show where a vehicle went, without holding every second of every journey forever.

If you close your account we keep your data for a short period so you can still ask for an export, then delete it. Records we must keep for legal or accounting reasons — such as invoices we issued you — are kept for as long as the law requires.

9. What you can ask us for

• A copy — Kaydro exports your customers, deyn, stock, sales and reports to CSV and PDF from inside the app, whenever you like, without asking us.
• A correction — you can edit your own account details; tell us if something we hold is wrong.
• Deletion — ask us to close your account and delete your data.
• An explanation — ask us what we hold about you and why.

Write to us using the details in section 12 and we will answer.

10. How we protect it

• traffic between your device and Kaydro is encrypted (HTTPS);
• passwords are stored hashed, never in readable form;
• what each person can reach is limited by their role;
• SGI administrator accounts require two-factor authentication;
• financial records are append-only — a posted entry is corrected by a further entry, never quietly rewritten;
• actions affecting money and access are written to an activity trail.

No system is perfectly safe. If a breach occurs that puts your information at risk, we will tell you what happened, what it affects, and what we are doing about it.

11. Cookies

Kaydro sets a cookie to keep you signed in and to protect forms from abuse. We do not use advertising cookies and we do not track you across other websites.

12. Contact us

Questions about this policy, or about information we hold, go to info@sahalglobal.org, or reach us at Garowe, Puntland, Somalia.

13. Changes

If we change this policy we will update the date at the top, and tell you inside Kaydro when the change is a significant one.