Effective date: 27 April 2026 · Last updated: 27 April 2026
This Privacy Policy explains how Kazi Media Ltd ("we", "us", or "our") collects, uses, stores, and protects your personal and business information when you use SenteBook (the "Service") — accessible at app.sentebook.com and the SenteBook mobile application. By using our Service, you agree to the practices described here.
Section 01
Who We Are
SenteBook is a business management platform developed and operated by Kazi Media Ltd, a company registered in Uganda. Our registered address and contact details are set out in Section 12.
SenteBook provides point-of-sale, stock management, credit tracking, invoicing, and financial reporting tools intended for small and medium businesses operating in Uganda and East Africa.
Section 02
Information We Collect
2.1 Information you provide directly
Account information: your name, business name, email address, phone number, and password when you register.
Business profile: business type, location, trading name, and any logo or branding you upload.
Financial data: sales transactions, invoices, credit balances, stock records, bank account details (names and balances — we do not collect full card numbers or banking credentials), and payment records.
Customer and employee records: names, phone numbers, credit balances, and roles of people you add to your SenteBook workspace.
Communications: messages you send to our support team.
2.2 Information collected automatically
Usage data: pages visited, features used, actions taken, timestamps, and session duration.
Device and technical data: IP address, browser type and version, operating system, device identifiers, and time zone.
Log data: server logs capturing errors, API requests, and response times for debugging and security purposes.
2.3 Information from third parties
Authentication providers: if you sign in with Google, we receive your name, email address, and profile picture from Google OAuth as permitted by your Google account settings.
Payment processors: if you pay for a subscription, payment processors may share transaction confirmations with us. We do not store full payment card details.
Section 03
How We Use Your Information
We use the information we collect to:
Create and manage your account and workspace.
Provide, operate, and improve the SenteBook platform and all its features.
Process transactions and generate financial reports within your workspace.
Send transactional emails — account confirmations, invoices, password resets, and system alerts.
Notify you about service updates, new features, or important changes to our terms or policies.
Provide customer support and respond to your enquiries.
Detect, investigate, and prevent fraudulent, abusive, or illegal activity.
Comply with applicable legal obligations, including tax and regulatory requirements.
Analyse aggregated, anonymised usage trends to improve our product (we do not use your financial data for this purpose).
We process your personal data on the following legal bases: performance of a contract (providing the Service you signed up for), legitimate interests (security, fraud prevention, product improvement), legal obligation (regulatory compliance), and consent (marketing communications, where applicable).
Section 04
How We Share Your Information
We do not sell your personal data. We share information only in the following circumstances:
4.1 Service providers
We share data with trusted third-party providers who help us operate the Service, under strict data processing agreements. These include:
Supabase: our cloud database and authentication infrastructure. Data is stored on servers within the EU (AWS eu-west-1) unless you are informed otherwise.
Resend / email providers: for sending transactional emails.
Vercel: for hosting the web application.
Payment processors: to handle subscription billing.
4.2 Within your workspace
Data you enter into SenteBook is visible to other authorised members of your business workspace according to their assigned roles (Owner, Manager, Cashier). You are responsible for managing access rights within your own workspace.
4.3 Platform administrators
SenteBook platform administrators may access workspace data for support, security investigations, or compliance purposes. All such access is logged and attributed.
4.4 Legal requirements
We may disclose your information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of SenteBook, our users, or the public.
4.5 Business transfers
If Kazi Media Ltd is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.
Section 05
Data Storage and Security
Your data is stored on Supabase infrastructure using PostgreSQL databases with row-level security policies. We implement the following technical safeguards:
Encryption in transit via TLS 1.2+ for all connections.
Encryption at rest for database storage.
HTTP-only, secure, same-site session cookies to prevent cross-site access.
Role-based access controls ensuring users can only access data within their authorised workspace.
Audit logging for privileged administrative actions.
Regular security reviews of our application and infrastructure.
No method of electronic storage or transmission is 100% secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security. If you suspect a security incident involving your account, please contact us immediately at security@sentebook.com.
Section 06
Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:
Account data: retained for the life of your account plus 12 months after deletion, to allow account recovery and to fulfil any outstanding legal obligations.
Financial records (invoices, transactions, reports): retained for 7 years to comply with Uganda's tax and accounting regulations.
Usage and log data: retained for 90 days and then deleted or anonymised.
Support communications: retained for 3 years.
After the applicable retention period, data is permanently deleted or anonymised so it can no longer be linked to you.
Section 07
Your Rights
Under the Uganda Data Protection and Privacy Act 2019 and, where applicable, the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your personal data, subject to legal retention requirements.
Right to restrict processing: to ask us to pause how we use your data in certain circumstances.
Right to data portability: to receive your data in a structured, machine-readable format.
Right to object: to processing based on legitimate interests or for direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting previous processing.
To exercise any of these rights, email us at privacy@sentebook.com. We will respond within 30 days. We may need to verify your identity before processing your request.
If you are not satisfied with our response, you have the right to lodge a complaint with the Uganda Personal Data Protection Office (PDPO) or your local supervisory authority.
Section 08
Cookies and Tracking
SenteBook uses the following types of cookies and similar technologies:
Strictly necessary cookies: session authentication cookies required for you to log in and use the Service. These cannot be disabled without breaking core functionality.
Preference cookies: to remember your active workspace, UI preferences (e.g., colour scheme), and language settings.
Analytics: we may use privacy-respecting, anonymised analytics to understand how the Service is used. Where we do, no personally identifiable information is sent to third-party analytics providers.
We do not use advertising or tracking cookies. We do not participate in cross-site tracking or retargeting networks.
Section 09
Children's Privacy
SenteBook is a business management platform intended for adults operating businesses. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us at privacy@sentebook.com and we will delete it promptly.
Section 10
International Data Transfers
Your data may be transferred to and stored in countries outside Uganda, including countries within the European Economic Area (EEA) where our infrastructure providers are based. Where such transfers occur, we ensure they are protected by appropriate safeguards — including Standard Contractual Clauses (SCCs) approved by the relevant authorities — so that your data receives a level of protection consistent with this Policy and applicable law.
Section 11
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice within the Service at least 14 days before the changes take effect. The updated policy will always be available at sentebook.com/privacy-policy.
Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised policy.
Section 12
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: