Privacy policy

Who we are

Kavash Ventures LLC (“Kavash Ventures”, “we”, “us”) makes NextraPOS, the till app for restaurants on Android and iPhone, and NextraPOS Accounts, the accounting website at nextrapos.kavashventures.com. This policy explains what information they collect, why, and the choices you have. Questions go to team@kavashventures.com.

For the people who hold accounts (restaurant owners, managers, accountants and staff), we decide how their information is used. A restaurant’s own customers are different: when a till records something about a customer, such as the phone number used to pay by mobile money, the restaurant decides how it is used and we handle it on the restaurant’s behalf.

What we collect

• Account details. Your email address and password, your name, and your restaurant’s details: its name, owner’s name, tax ID (TIN), phone number, address, currency and tax rate. Passwords are stored only as a secure hash by our sign-in provider; we never see them.
• Staff on the till. Each person’s name and role, and a PIN they use to sign in at the till. A PIN is stored only as a salted hash, never as the PIN itself.
• Business records. The menu, tables, orders, receipts, payments and stock entered at the till, and the accounting records built from them on the website: journals, the daily cash-up, petty cash, the cash book, fixed assets and any bank statements you upload.
• Payment details. For every payment, the amount, method and time. When a customer pays by mobile money, the phone number entered at the till is stored with that payment. When a contactless card is tapped, the till stores an identifier read from the card’s chip. It does not read or store card numbers, expiry dates or security codes.
• Error reports. When the app or the website runs into a fault, it sends us a report: what went wrong, on which screen or page, the app version, and the device model and operating system. We do not attach names, email addresses or customer details to these reports.
• Cookies. The website uses only the cookies needed to keep you signed in. There are no advertising or analytics cookies.

The till keeps a copy of your restaurant’s data on the device so it works without an internet connection, and sends changes to our servers when it is online. It uses the device’s internet access, and NFC only while a contactless payment is being taken.

What we don't do

• We do not sell your information or your customers’ information.
• We do not show ads, and we do not use advertising or analytics tools.
• We do not track you across other companies’ apps or websites.

How we use it

• To run the service: ring up sales, keep tills in sync, post your books and produce your reports.
• To send the daily cash-up summary to the email addresses your restaurant chooses.
• To keep accounts secure, and to find and fix faults.
• To answer your questions and support requests.
• To meet our legal obligations.

Who we share it with

We share information only with the services that run NextraPOS for us, and only what each one needs:

• Supabase stores the data and handles sign-in.
• Cloudflare hosts the NextraPOS Accounts website.
• Resend delivers the cash-up emails.

Error reports go to a server we run ourselves. Within your restaurant, the people you invite see the books according to the role you give them. We may also disclose information when the law requires it, or to protect the safety of our users or the service.

These providers may store data in countries other than yours. We choose providers that protect it with appropriate safeguards.

How we protect it

Information is encrypted in transit between the apps and our servers. Each restaurant’s records are kept apart from every other restaurant’s, and access within a restaurant follows each person’s role. Passwords and PINs are stored only as hashes. No system is perfectly secure, so please keep your password and PINs to yourselves.

How long we keep it

We keep your information while your account is open. When an account is deleted we remove its information from our servers within 30 days, except where the law requires us to keep a record for longer. Error reports are kept only as long as we need them to fix the problem. Accounting records often have to be kept for several years for tax purposes, so export what you need before you ask us to delete an account.

Your choices and rights

You can ask us to tell you what information we hold about you, to correct it, to delete it, or to stop using it for a purpose. Most of your restaurant’s information can be viewed, corrected and exported to Excel from NextraPOS Accounts. For anything else, email team@kavashventures.com. We handle personal data in line with the data protection laws that apply to it, including Uganda’s Data Protection and Privacy Act, 2019, and you may complain to your data protection authority if you are unhappy with how we have dealt with a request.

Customers of a restaurant should contact the restaurant first, since it decides how their information is used; we will help the restaurant answer.

Deleting your account

To delete your NextraPOS account and your restaurant’s data, email team@kavashventures.com from the email address you sign in with, with the subject “Delete my NextraPOS account”. We will confirm the request with you and complete it within 30 days. This deletes your account, your restaurant’s records and your staff accounts from our servers, apart from anything the law requires us to keep. Uninstalling the app removes the copy kept on that device.

An owner can remove someone else’s access at any time under Settings → Members in NextraPOS Accounts.

Children

NextraPOS is a tool for businesses and is not meant for anyone under 18.

Changes to this policy

We will update the date at the top when this policy changes, and tell you in the app or by email before a significant change takes effect.

Contact us

Kavash Ventures LLC
team@kavashventures.com