Privacy Policy

Who is responsible for your data

Sibasi Ltd is the data controller for your EBM Suite account: your name, sign-in details and how you use the app. The business records you keep in EBM Suite — customers, suppliers, sales, invoices, stock and expenses — belong to your business. For those records your business is the data controller and Sibasi processes them on your behalf, only to provide, support and improve the service.

What we collect

• Account details: your name, email address, country and password (and phone number, if you give one), or your Google or Apple account if you sign in with one.
• Business details: your organisation's name, contact details, tax details and logo.
• Business records: the products, customers, suppliers, sales, invoices, quotes, receipts and expenses you enter.
• Device information: when you create an account in the mobile app we record a device identifier (the Android ID, or the app's vendor identifier on iOS), and we collect basic device details such as model and operating-system version.
• Usage and diagnostic data: how the app's screens are used, and crash and error reports, so we can find faults and improve the app.

Device permissions the mobile apps use

• Camera: to scan product barcodes and to photograph receipts. Photos are taken only when you choose to.
• Photos and files: to attach an image you pick, such as your business logo or an expense receipt.
• Receipt text recognition: when you scan a receipt, the text is read on your device to pre-fill the expense. The receipt photo stays on your device; only the expense details you save are uploaded.
• Fingerprint or face unlock: if you turn it on, your device checks your biometrics. EBM Suite only receives a pass or fail; your biometric data never leaves your device.
• Bluetooth printer: to print receipts to a printer you pair.

How we use it

• To create and secure your account and sign you in.
• To run the features you use: point of sale, invoicing, inventory, expenses and reports.
• To submit tax invoice data to a revenue authority, such as KRA eTIMS, when your business configures EBM Suite to do so.
• To provide support, fix faults and improve the product.
• To send service messages about your account.

We do not sell personal data, and we do not use your business records for advertising.

Service providers we share data with

We share data only with providers that help us run EBM Suite, and only for that purpose:

• Google Firebase — sign-in, app analytics and crash reporting.
• Microsoft Clarity — how this website and the mobile app are used, including session recordings, so we can see where people get stuck. Recordings of the app can show what is on screen, including business records; we use them only to fix and improve EBM Suite.
• Google Analytics — visits to this website.
• Google and Apple — if you choose to sign in with their accounts.
• Revenue authorities — only the tax data your business directs EBM Suite to submit.

We also disclose data where the law requires it.

Security

Data travels between the apps and our servers over encrypted connections (HTTPS). Sign-in tokens are kept in your device's secure storage. The mobile app keeps a copy of your business data on your device so it keeps working offline. Access to customer data is limited to the people who need it to run and support the service.

How long we keep data, and deleting your account

We keep your account and business records while your account is active. You can delete your account in the mobile app under Settings → Advanced Settings → Delete Account, or by emailing [email protected] from the address on the account. Retention after deletion, including records the law requires us to keep, follows the Sibasi Privacy Policy.

Your rights

You can ask to access, correct, export or delete your personal data, object to its use, or ask how it is handled. Email [email protected]. If your details are in a business's records, for example as its customer, please contact that business first: it controls those records. You can also complain to the Office of the Data Protection Commissioner in Kenya, or to the data protection authority where you live.

Children

EBM Suite is a business tool. It is not intended for children.

Changes to this policy

We will update this page when the way EBM Suite handles data changes, and change the date at the top.

Contact

Sibasi Ltd, 327B Nyati Drive, Thome, Nairobi, Kenya · P.O. Box 37602-00100, GPO
Email: [email protected] · Phone: +254 780 742274

See also the EBM Suite Terms of Service.