Privacy Policy — Clinic On the Go

Last updated: 7 October 2026

DRAFT TEMPLATE. Have a Kenyan lawyer review this and fill in the bracketed items before relying on it. Register with the Office of the Data Protection Commissioner (ODPC) as required under the Data Protection Act, 2019.

1. Who we are

Clinic On the Go is operated by Duka GO Enterprises, Nairobi, Kenya ("we"). Contact: muturi.francis25@gmail.com.

2. What data we handle

Shops using the app store: staff names, roles and PINs; product, stock and price records; sales, refunds, supplier and customer-credit records; and shop settings. Data is kept on the device and, when online, synced to our cloud database so a shop can use several devices. Shops are the owners of their business data; we process it on their behalf.

3. How we use it

Only to run the app for your shop: sign-in, sync across your devices, reports, and support. We do not sell your data or use it for advertising.

4. Sharing

Data is stored with our infrastructure provider (Supabase) and is visible only to the shop it belongs to, and to our platform administrators for support and licence management. We disclose data if required by Kenyan law.

5. Security

Access is controlled by staff PINs and optional biometric sign-in. Shops should keep PINs private and deactivate staff who leave.

6. Retention and deletion

Data is kept while the shop's subscription is active. On request, or after cancellation, we will delete or export the shop's data within [30] days, subject to legal record-keeping duties.

7. Your rights

Under the Data Protection Act, 2019 you may ask to access, correct or delete your personal data, or object to its processing, by contacting us at the address above. You may also complain to the ODPC.

8. Changes

We may update this policy; the date above shows the latest version.