Privacy Policy

1. Scope and roles

RNG POS is provided by RNG Global LTD ("RNG POS", "we", "us", or "our"). This policy applies when you visit our public website, create an account, use the admin portal, or use an RNG POS application on a phone, tablet, or computer.

A business using RNG POS decides which employee, customer, supplier, product, and transaction information it enters and why it is processed. For that business information, the business is generally the data controller and RNG POS provides the system as its service provider or processor. RNG Global LTD separately controls information needed to manage platform accounts, security, support, communications, and billing.

2. Information we handle

Account and business information

We process names, business names, store details, email addresses, telephone numbers, user roles, store assignments, account status, billing plan information, and authentication records.

Information entered by a business

Users may enter customer and supplier names, telephone numbers, credit balances, feedback, purchase and repayment records, products, stock quantities, expenses, shifts, sales, discounts, taxes, payment methods, payment references, receipts, and reconciliation information.

Device, security, and diagnostic information

We may process a device identifier, application version, platform, assigned store, last-seen and last-sync times, notification token, IP address, browser or device details, audit events, failed requests, and other technical information needed to secure and operate the service.

Cookies

The admin portal uses an essential, secure authentication cookie to keep signed-in sessions working. RNG POS does not currently use this portal cookie for third-party advertising.

3. How we use information

We use information where necessary to:

• provide sales, stock, purchase, expense, credit, shift, receipt, reporting, and multi-store features;
• authenticate users and enforce tenant, store, role, device, subscription, and feature permissions;
• synchronize offline records, prevent duplicate transactions, and maintain recovery records;
• send account, password, billing, stock, security, and operational notifications;
• provide support, investigate faults, prevent misuse, and improve reliability;
• administer trials, plans, invoices, and payments; and
• meet contractual, accounting, security, and legal obligations.

Depending on the circumstances, processing may be based on performance of a contract, consent, legitimate business and security interests, or compliance with legal obligations.

4. Offline data, recovery exports, and biometrics

RNG POS can store catalog information, account session information, settings, and unsynchronized transactions locally so that authorized users can continue working during a network interruption. The app attempts to synchronize queued records when connectivity returns. Queued records may be retained locally when synchronization fails so that business evidence is not silently deleted.

A user may generate a recovery export containing unsynchronized sales. Recovery exports may contain personal and commercial information and are not a substitute for an encrypted backup. The person generating an export must store and transmit it securely and share it only with authorized recipients.

On supported Android and iOS devices, users may enable biometric authentication. Fingerprint or facial templates are evaluated by the device operating system and are not received or stored by RNG POS. Biometrics protect access to credentials held in the device's secure storage; availability and security depend partly on the device and operating system.

5. Sharing and service providers

We may disclose information only as reasonably necessary to:

• authorized users and administrators of the business account;
• hosting, database, email, SMS, push-notification, support, and payment service providers configured for RNG POS;
• professional advisers, auditors, insurers, or transaction counterparties under appropriate confidentiality duties;
• law-enforcement, regulators, courts, or other parties where disclosure is legally required; or
• protect users, the public, RNG POS, and the integrity of the service.

We do not sell personal information or use business transaction data for third-party advertising.

6. Retention

We retain information for as long as needed to provide an active account, preserve transaction and audit integrity, resolve disputes, recover queued records, enforce agreements, and satisfy applicable accounting or legal requirements. Retention periods vary by record type and by the instructions and obligations of the business account.

Local app records remain on a device until they are removed through the application, its storage is cleared, or the application is uninstalled. Uninstalling or clearing storage before synchronization may permanently remove records that have not reached the server.

7. Security

We use administrative, technical, and organizational safeguards appropriate to the service, including role-based access, tenant and store separation, password hashing, secure session controls, encrypted network transport in production, device registration, audit records, and operating-system secure storage where supported. No internet or storage system can be guaranteed to be completely secure.

Account holders are responsible for assigning appropriate roles, removing former users, protecting credentials and devices, reviewing the offline queue, and reporting suspected unauthorized access promptly.

8. Your choices and rights

Subject to applicable law, a person may request access to, correction of, deletion of, restriction of, or a copy of personal information, and may object to certain processing or withdraw consent where consent is the basis for processing. Some transaction, audit, security, and legal records may need to be retained.

Customers and employees of a shop should normally contact that business first because it controls the information entered into its RNG POS account. Account holders may submit platform or account requests to info@solution.co.ke. We may verify identity and authority before acting on a request.

Device and browser notification permissions can be changed in RNG POS settings or the device settings. Essential service and security notices may still appear inside the application.

9. International transfers

Some infrastructure or communication providers may process information outside the country where a user or business operates. Where required, we use contractual or other appropriate safeguards for such transfers.

10. Children

RNG POS is a business operations service and is not directed to children. A business must not create user accounts for persons who cannot lawfully use the service or enter children's personal information without an appropriate lawful basis and safeguards.

11. Changes to this policy

We may update this policy when the service, providers, or legal requirements change. The updated version will be posted here with a revised effective date. We may also notify account administrators when a change materially affects how information is handled.

12. Contact us