OrbitR Ledger ("we", "our", "us") provides a customer credit management application that helps small
businesses in Tanzania record credit sales, track customer debts, send payment reminders, and manage
subscriptions. This Privacy Policy explains what data we collect, why we collect it, how it is used,
and your rights.
1. Information We Collect
Account information: Your phone number, which is used to create and secure your account via SMS one-time-password (OTP) verification.
Business information: Business name, category, location, and your preferred reminder time.
Customer data you enter: Customer names, phone numbers, addresses, credit sale amounts, due dates, and payment records. This data belongs to you and is used only to provide the service you requested.
Payment and subscription data: Subscription status, payment records, and payment provider references (e.g. ClickPesa transaction identifiers) for billing TSh 3,000/month.
Device / push data: A push notification subscription identifier (via OneSignal) so we can send you reminders and alerts.
2. How We Use Your Information
To authenticate you with SMS OTP and secure your account.
To record and display your customers' credit balances and repayment history.
To send automated SMS payment reminders to your customers, based on the reminder schedule you choose and the SMS consent you record from each customer.
To send you (the business owner) push notifications and a daily debt summary.
To process and confirm your TSh 3,000/month membership payments.
To improve the service, provide support, and prevent fraud or abuse.
3. Data Sharing and Disclosure
We do not sell your personal data. We share data only with the service providers
required to operate the app:
SMS provider (RafikiSMS): receives customer phone numbers and reminder messages you ask us to send.
Payment provider (ClickPesa): receives transaction details to process your membership payments.
Push provider (OneSignal): receives your push subscription identifier to deliver notifications.
Hosting provider (Supabase): stores your data securely in encrypted, access-controlled databases.
We may also disclose data where required by law, to protect rights and safety, or with your consent.
4. Data Security
We protect your data using industry-standard measures: encrypted transmission (HTTPS), encrypted
storage, role-based access controls, and row-level security so each business can only access its own data.
5. Data Retention
We keep your data for as long as your account is active and for a reasonable period afterward as
needed for legal or accounting obligations. You can delete your account at any time (see Section 6),
which permanently removes your business and all related customer data.
6. Your Rights and Account Deletion
You may request deletion of your account and all associated data at any time. You can delete your
account directly inside the app:
Open OrbitR Ledger.
Go to Mipangilio (Settings).
Under Akaunti, tap "Futa akaunti na data zote" and confirm.
This permanently deletes your business, customers, credit sales, payments, reminders, and subscription.
The deletion is irreversible.
You may also request account deletion by contacting us using the details in Section 8. We will process
the request within a reasonable time (typically within 30 days).
7. Children's Privacy
OrbitR Ledger is intended for business owners aged 18 and above. We do not knowingly collect
information from children.
8. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:
Email: mwanachuoshop@gmail.com
Address: Dar es Salaam, Tanzania
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through
the app. Continued use of the app after changes means you accept the updated policy.