1. Who we are and what this covers
This policy explains how NgenoTech Global (“we”, “us”) handles information in Chemist & Pharmacy POS, available at chemist.ngenotechglobal.co.ke and through our Android and desktop apps. It should be read together with our general Privacy Policy.
2. Information we process
2.1 Account and business information
- Business name, location, phone number and email address
- Staff user names, roles and login credentials (passwords are stored hashed)
- Subscription, licence and billing details
2.2 Records the business enters
- Sales, receipts, payments (cash, card, M-Pesa references), refunds and reports
- Products, stock levels, suppliers and purchase orders
- Medicine batches, expiry dates and dispensing records
- Patient details the pharmacy chooses to record: name, phone, prescriptions and prescriber details. This is sensitive health data and is only visible to the pharmacy's authorised staff
2.3 Technical information
- Device model, operating system and app version, for support and security
- Error logs and sign-in activity (IP address, time) to protect accounts
3. Device permissions (mobile app)
The app only asks for a permission when you use the feature that needs it:
- Camera — to scan barcodes and QR codes
- Bluetooth / nearby devices — to connect receipt printers and cash drawers
- Storage / files — to export reports or import product lists
- Internet — to sync data between devices and back it up
We do not access your contacts, microphone or location, and we do not use advertising IDs.
4. How we use information
- To run the POS for your business: record sales, keep stock, print receipts and produce reports
- To sync data across your devices and keep backups
- To provide support, send service notices and manage your licence
- To keep the service secure and prevent fraud
We do not sell your data or your customers’ data, and we do not use it for advertising.
5. Sharing
We share information only with service providers who help us run Chemist & Pharmacy POS (cloud hosting, email/SMS delivery, payment processors such as M-Pesa and PayPal), under contracts that require them to protect it; or when the law requires us to.
6. Security and storage
- Data is encrypted in transit (HTTPS/TLS) and access is limited by staff roles you control.
- Offline data stays on your device until it syncs.
- Business records are kept while your account is active. After cancellation they are kept for 90 days so you can export them, then deleted, except where law requires longer retention.
7. Your rights and deletion
You may access, correct, export or delete your data. Business owners can request deletion of their whole POS account and records — see Account & Data Deletion. If you are a customer of a business that uses Chemist & Pharmacy POS, please contact that business first; we will help them respond.
8. Children
Chemist & Pharmacy POS is a business tool intended for adults. It is not directed at children under 18. See our Child Safety Standards.
9. Changes and contact
We will post changes on this page and update the date above. Questions: info@ngenotechglobal.co.ke · NgenoTech Global, Nairobi, Kenya.