Legal
Privacy policy
Last updated 1 August 2026.
Who we are
XALKAAB (“we”) is point-of-sale software for Ethiopian shops, available at https://xalkaab.com and pos.xalkaab.com. Privacy questions: WhatsApp +251 915 063 563.
What we collect
Account details you give us (name, email, shop name, phone if provided). Shop data you enter in the product — products, sales, stock, customers, staff, and similar operations records. Payment metadata when you use paid plans or mobile-money features (amounts, status, provider references — not your mobile-money PIN). Device, log, and usage signals we need to keep the service reliable and secure.
How we use it
To run the product for your shop: sync sales, process payments you start, give support, and keep things secure. We also use analytics and operational metrics to improve reliability and features. We may use aggregated or anonymized shop and usage data for product research, market study, and to better understand the Ethiopian retail market. We do not sell your shop’s customer lists or hand identifiable shop records to advertisers.
Who we share with
Infrastructure providers that host and deliver the service, email delivery, and mobile-money or payment gateways when you use those features — only as needed to operate. We may share aggregated or anonymized insights that do not identify your shop. We share more only when the law requires it. Staff access is limited to people who need it for support or operations.
Security
Connections to XALKAAB use modern TLS encryption in transit. Sensitive session and unlock data on device is protected with strong cryptography. We do not expose your shop records on public dashboards or sell identifiable customer lists. Staff access is limited to people who need it for support or operations. No online system is perfectly secure; we use standard safeguards and keep improving them.
How long we keep it
Account and shop data while your shop is active, and for a reasonable period afterward for backups, disputes, and legal requirements. Aggregated analytics may be kept longer because they no longer identify a specific shop.
Your rights
Update account details in the app. Email us to export or request deletion of your tenant data, or to ask a privacy question. You can opt out of non-essential product emails. Some records may need to stay for accounting or legal reasons. Aggregated market insights that no longer identify you are generally not subject to deletion requests.
Changes
We may update this policy. The date above changes when we do. Continued use after an update means you accept the revised policy.