Privacy policy
What we collect, why, and the choices you have. Written to follow Uganda’s Data Protection and Privacy Act, 2019 and its 2021 Regulations.
Last updated 20 October 2026
Who we are
Kwikri ERP (“we”) provides online business software at kwikri.co.ug, from our office at Entebbe Road, Kampala, Uganda. For the account details you give us, we are the data controller. For the records you keep in Kwikri ERP about your own customers, staff and suppliers, you are the data controller and we process that data on your behalf.
What we collect
- Account details: business name, your name, email, phone, username and a one-way hash of your password.
- Billing: your package, payment amounts, dates and payment references. You pay us by mobile money or bank, so we see the transaction ID you send us but never your mobile money PIN or bank login.
- Your business records: customers, products, invoices, sales, stock, employees and payroll that you enter.
- Security and usage: sign-in times, IP addresses for blocking repeated wrong passwords, an activity log of changes, and whether a document link was opened.
- Messages you send us through the contact form or email.
Why we use it
- To provide the service you signed up for, including sending emails you ask us to send.
- To keep accounts secure: email confirmation, sign-in codes, password resets and fraud prevention.
- To bill you and send receipts and reminders about your subscription.
- To answer your questions and fix problems.
We do not sell personal data, and we do not use your business records for advertising.
Who we share it with
Only service providers we need to run Kwikri ERP: our hosting provider, email delivery, Africa’s Talking when a business sends SMS (the phone number and message), and Google when a user chooses to connect their Google Calendar (their own appointments and tasks only, and only while connected; they can disconnect at any time). Each processes data only to provide their service to us. We disclose data to authorities only when the law of Uganda requires it.
How long we keep it
We keep your account and records while your account is open, so you can still see them after a subscription ends. When you ask us to close your account, we delete your records within 30 days, except billing records we must keep for tax purposes. Download a copy first from My account.
Your rights
You can ask to see, correct, download or delete your personal data, object to its use, or withdraw consent where we rely on it. Email hello@kwikri.co.ug. If you are not satisfied with our answer you can complain to the Personal Data Protection Office (PDPO) at NITA-U.
If you keep data about other people in Kwikri ERP, such as staff salaries or customer phone numbers, you are responsible for having a lawful reason to keep it and for answering their requests. We will help you do that.
Security
Connections are encrypted, passwords are hashed, each business is kept separate, and two-step sign-in is available to every user. See Security for details.
Data kept on your device
So the till keeps working during power or internet cuts, a copy of your business’s records and any changes not yet sent are kept in the browser on that device. Logging out removes the copy (changes not yet sent are kept until they reach the server). Only use Kwikri on devices your business controls.
Cookies
We use a sign-in cookie to keep you logged in, and a cookie to remember a trusted device if you choose that. We do not use advertising or tracking cookies.
Changes
If we change this policy in a way that matters, we will tell account holders by email before it takes effect.