Privacy first
Your shop data stays yours — by default.
Staff phones, customer payer numbers, and shop revenue are hidden from XALKAAB support unless you unlock them with a support code emailed only to you.
We don’t peek. You decide when support can see.
Redacted by default
Sensitive shop fields are withheld from our internal tools — not merely locked behind a role.
Your support code
After signup we email you a code. Support only sees staff phones, payer numbers, and revenue after you read them that code.
Time-boxed access
Unlock lasts 30 minutes, rotates when you request a new code, can be revoked, and is logged. We store a hash — never the plaintext code.
PIN resets need you
Staff PIN resets are impossible without your support code. No back door.
Legal
Privacy policy
Last updated 6 September 2026.
This page is provided in English and Somali. If the translations differ, the English version governs.
Who we are
XALKAAB (“we”) is point-of-sale software for shops, available at https://xalkaab.com and pos.xalkaab.com. Privacy questions: WhatsApp +251 915 063 563. — https://xalkaab.com / pos.xalkaab.com / +251 915 063 563
What we collect
Account details you give us (name, email, shop name, phone if provided). Shop data you enter in the product — products, sales, stock, customers, staff, and similar operations records. Payment metadata when you use paid plans or mobile-money features (amounts, status, provider references — not your mobile-money PIN). Device, log, and usage signals we need to keep the service reliable and secure. We do not collect your mobile-money PIN or store plaintext support codes.
How we use it
To run the product for your shop: sync sales, process payments you start, give support, and keep things secure. We also use analytics and operational metrics to improve reliability and features. We may use aggregated or anonymized shop and usage data for product research, market study, and to better understand the retail market. We do not sell your shop’s customer lists or hand identifiable shop records to advertisers.
Who we share with
Infrastructure providers that host and deliver the service, email delivery, and mobile-money or payment gateways when you use those features — only as needed to operate. We may share aggregated or anonymized insights that do not identify your shop. We share more only when the law requires it. Internally, sensitive shop fields (staff phone numbers, customer payer numbers, and shop revenue) are redacted from support tooling by default — not merely role-gated.
Support access and your code
Every shop receives a support code emailed to the owner after signup. XALKAAB support staff can see staff phone numbers, customer payer numbers, and shop revenue only after the owner reads them that code. Access lasts about 30 minutes, rotates each time a new code is emailed, can be revoked by the owner, and is logged. We store only a hash of the code — nobody at XALKAAB can read the plaintext back. Staff PIN resets require the same unlocked access. You can request a new code anytime from Settings in the app.
Security
Connections to XALKAAB use modern TLS encryption in transit. Sensitive session and unlock data on device is protected with strong cryptography. We do not expose your shop records on public dashboards or sell identifiable customer lists. Sensitive fields stay redacted in internal tools until you grant time-limited support access. No online system is perfectly secure; we use standard safeguards and keep improving them.
Privacy by default
We design so that the least sensitive view is the default. We do not show identifiable shop revenue or staff/customer contact details to support without your code. We do not sell customer lists. Aggregated market insights, when used, do not identify your shop.
How long we keep it
Account and shop data while your shop is active, and for a reasonable period afterward for backups, disputes, and legal requirements. Aggregated analytics may be kept longer because they no longer identify a specific shop. Support access grants expire automatically.
Your rights
Update account details in the app. Email us to export or request deletion of your tenant data, or to ask a privacy question. You can opt out of non-essential product emails. Some records may need to stay for accounting or legal reasons. Aggregated market insights that no longer identify you are generally not subject to deletion requests.
Changes
We may update this policy. The date above changes when we do. Continued use after an update means you accept the revised policy.