This policy explains what KhumoHub Inventory and POS ("we") collects when you use the KhumoHub inventory and point-of-sale application, why we collect it, and the choices you have. KhumoHub Inventory and POS is the data controller for the information described here.
Information we collect
- Account information — name, email address, mobile number, store name and the role assigned to you by your store owner.
- Transaction information — sales, refunds, cash-ups, drawer movements, purchase orders, goods received and stock counts recorded in your store.
- Customer records — where your store uses credit accounts, the customer name, contact number and outstanding balance you capture.
- Device information — device identifier, app version and diagnostic logs used to keep the till working and to investigate faults.
Biometrics stay on your device
Fingerprint and face sign-in use the WebAuthn platform authenticator. The biometric template never leaves the device and is never transmitted to or stored by KhumoHub. We only store the public key credential identifier. A PIN fallback is always available.
How we use the information
- To operate the till, stock, ordering, cash and reporting features.
- To authenticate users and enforce store roles and manager approvals.
- To produce the reports and audit journals your store is required to keep.
- To detect fraud, abuse and technical faults.
We do not sell personal information and we do not use it for third-party advertising.
Sharing
Data is shared only with processors that run the service on our behalf (cloud hosting and database, email and messaging delivery, crash and analytics tooling), with our Merchant of Record for subscription sales, with professional advisers such as our accountants and lawyers, and with authorities where the law requires it. Processors are bound by written terms and may not use the data for their own purposes.
Payments and our payment processor
Subscription payments are processed by Paddle.com, which acts as the Merchant of Record and reseller for our subscriptions. When you buy or renew a KhumoHub subscription through our web checkout, your name, email address, billing address, country and tax details are collected and processed by Paddle on their secure, PCI-compliant platform to take payment, issue invoices, handle tax compliance and manage the subscription. We receive from Paddle the subscription status, plan, customer identifier and transaction records needed to activate your plan and keep our billing records — we never receive or store your full card or banking details. Subscriptions bought inside the Android app are processed instead through Google Play Billing under Google's terms. Refunds are described in our refund policy.
Storage and retention
Data is encrypted in transit (TLS) and at rest. Transactional records are retained for five years to satisfy South African tax record-keeping obligations; account profiles are deleted within 30 days of a verified deletion request, other than records we must legally keep.
Your rights
You may request access to, correction of, or deletion of your personal information at any time — see the account deletion page or email privacy@khumohub.co.za. You may also lodge a complaint with the Information Regulator of South Africa.
Children
KhumoHub is a business tool and is not directed at children under 18.
Changes
Material changes to this policy will be announced in the app at least 14 days before they take effect.