Privacy Policy

Kashibaa Admin · Last updated: 5 October 2026

This Privacy Policy explains how Kashibaa ("we", "us") collects, uses and protects information in the Kashibaa Admin app (Android, iOS and web). Kashibaa Admin is a business tool used by authorised Kashibaa staff to manage products, stock, orders, payments, offline sales and invoices. It is not intended for the general public.

1. Information we collect

• Account information: email address, password (handled by Firebase Authentication — we never see or store your password in plain text), name and role of staff users.
• Business and customer records: information entered by staff while running the business, such as customer or buyer names, phone numbers, addresses, orders, payments, deposits, advances and invoices.
• Photos and videos: product images and videos you choose to upload from your device's camera or gallery. The app only accesses media you explicitly select.
• Device information: a push notification token (Firebase Cloud Messaging) used to deliver order and payment alerts, and basic app preferences stored locally on your device.

We do not collect your location, contacts, call logs or SMS, and we do not show advertisements.

2. How we use information

• To sign you in and control access to admin features.
• To manage the product catalogue, stock, orders, payments and offline sales.
• To generate and share invoices.
• To send notifications about new orders, payments and other business events.
• To keep the service secure and fix problems.

3. Where data is stored

Data is stored on Google Firebase (Authentication, Cloud Firestore, Cloud Storage and Cloud Messaging), which encrypts data in transit and at rest. See Firebase privacy and security.

4. Sharing

We do not sell or rent personal information. Data is shared only:

• with service providers that run the app (Google Firebase);
• when you choose to share something, such as sending an invoice through WhatsApp or another app;
• when required by law or to protect our rights.

5. Data retention and deletion

Business records are kept for as long as needed to run the business and to meet legal, tax and accounting requirements. Staff accounts can be disabled or deleted by an administrator. To ask for your account or personal data to be deleted, contact us using the details below.

6. Security

Access is limited to authenticated, approved staff and enforced by Firebase security rules. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your information.

7. Children

The app is for business use only and is not directed at children under 18. We do not knowingly collect data from children.

8. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date shown above.

9. Contact us

For questions about this policy or your data, email kashibaa.master@gmail.com.