Privacy policy

For the accounts of business owners and attendants, ARTEP Limited is the data controller. For the records a business keeps in DingDing about its own customers (for example a delivery customer's name and phone number), the business is the data controller and we process those records on its behalf, only to provide DingDing to it.

• Your account: your name and phone number, the businesses you belong to and your role (owner or attendant).
• Business details: the business name and type, and what owners choose to add, such as a logo, KRA PIN, registration details and M-Pesa till number.
• Business records: items and prices, sales, M-Pesa transaction codes, expenses, stock, open bills, timers, orders and cash hand-overs, each with who recorded it and when.
• Customers of a business: only what the business records, such as a customer's name and phone number for a delivery.
• Payments to DingDing: the phone number and amount of your top-ups, and the payment reference.
• Technical details: a login cookie that keeps you logged in, your phone's type of browser, and, if you switch on notifications, the address our notifications are sent to. We use no advertising or tracking cookies.

• To provide DingDing: log you in with a WhatsApp code, record sales and work out your reports.
• To send the messages you asked for: login codes, evening summaries, reminders and alerts on WhatsApp or your phone.
• To answer the questions you ask DingDing's assistant about your own records.
• To take payment for selling days, and to keep accounts as the law requires.
• To keep DingDing safe, prevent misuse and fix problems.
• To improve DingDing, using totals that do not identify you or your business.

We use your data because it is needed to provide the service you signed up for, to meet legal duties, and for our legitimate interest in keeping DingDing secure and working well. Where we need your consent, we ask for it first, and you can withdraw it at any time.

We never sell your data. We share it only with the companies that help us run DingDing, and only what they need:

• Meta (WhatsApp): to deliver WhatsApp messages to you.
• Paystack: to take M-Pesa payments for selling days.
• Anthropic: to answer questions you ask DingDing's assistant, using figures from your own records. Anthropic does not use them to train its models.
• Render and Neon: who host our servers and database.

Each business sees only its own records. Attendants see their own sales, not the business's expenses or profit. No business data is shared with lenders or anyone else unless the owner chooses to share it, each time. We may disclose data when the law requires it.

Our servers and database are in the European Union (Frankfurt, Germany). Data protection there is at least as strong as in Kenya. Data travels between your phone and our servers encrypted.

We keep business records for as long as the business uses DingDing, and then for up to 7 years, because tax and business records must be kept that long. You can ask us to delete your account sooner, and we will, except where the law requires us to keep a record. Login codes expire after 10 minutes, and a login lasts up to 30 days on a phone.

Each business's records are kept apart by the database itself. Login codes and logins are stored only in scrambled form. Sales and expenses can't be quietly changed or deleted; corrections are recorded as new entries. Only a few people at ARTEP Limited can reach the systems, using two-step login.

Under the Data Protection Act, 2019, you have the right to:

• be told how your data is used (this policy);
• see the data we hold about you, and get a copy;
• have wrong data corrected;
• have your data deleted, where the law allows;
• object to, or limit, how we use it;
• take your records with you: owners can download their raw records from DingDing at any time.

To use these rights, contact us at hello@dingding.co.ke or 0721 383 093. If you are unhappy with our answer, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

DingDing is for people running or working in a business, aged 18 and over.

If we change this policy in a way that matters, we will tell you in the app before the change takes effect.

ARTEP Limited, Sultan Office Suites, Wing C, Suite 2, Karen, Nairobi, Kenya. hello@dingding.co.ke or 0721 383 093.