Privacy Policy

How DUKA collects, uses, and protects your information — in plain language.

Last updated: April 12, 2026 · Effective: April 12, 2026

1. Introduction

DUKA Technologies Ltd ("DUKA," "we," "us," or "our") operates the DUKA finance platform. This Privacy Policy explains what information we collect when you use our services, how we use it, and the choices you have.

We are committed to protecting your privacy and handling your data in a transparent, lawful manner. If you have any questions, contact us at privacy@duka.rw.

2. Information we collect

Information you provide

Account information — name, email, phone number, business name, and password when you sign up.
Business data — sales, inventory, expenses, customers, and other records you create inside DUKA.
Payment information — billing details processed securely by our payment processors.
Support communications — messages, emails, and attachments when you contact us.

Information we collect automatically

Device data — IP address, browser, operating system, device identifiers.
Usage data — pages visited, features used, timestamps, referral sources.
Cookies and similar tech — see our Cookie Policy for details.

3. How we use information

We use the information we collect to:

Provide, maintain, and improve the DUKA service.
Authenticate you and secure your account.
Process payments and send receipts.
Send service announcements, security alerts, and support messages.
Respond to your questions and feedback.
Detect, prevent, and address fraud or abuse.
Comply with legal obligations.

We do not sell your personal information, and we do not use your business data to train AI models without your explicit consent.

We share information only in these limited cases:

Service providers — hosting, email, analytics, and payments vendors under strict data-processing agreements.
Legal compliance — when required by law, subpoena, or to protect rights and safety.
Business transfers — in the event of a merger or acquisition, with notice to you.
With your consent — any other sharing requires your explicit permission.

5. Data security

We take security seriously. All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Our infrastructure is hosted on ISO 27001 certified providers, with regular backups, access controls, and audit logging.

6. Your rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you.
Correct inaccurate information.
Request deletion of your data.
Export your data in a portable format.
Object to or restrict certain processing.
Withdraw consent at any time.

To exercise these rights, email privacy@duka.rw. We'll respond within 30 days.

7. Cookies

We use cookies to keep you signed in, remember your preferences, and understand how our service is used. You can control cookies in your browser settings. See our full Cookie Policy.

8. Children's privacy

DUKA is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have, please contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll post the new version here, update the "Last updated" date, and notify you by email if the changes are material.

10. Contact us

Questions about this policy? Reach out:

Email: privacy@duka.rw
Post: DUKA Technologies Ltd, 3rd Floor, Ikaze House, KG 11 Ave, Remera, Kigali, Rwanda