Privacy Policy

This Privacy Policy explains how iKita (“iKita”, “we”, “us”) collects, uses, and protects information when you use our shop-management application and website (the “Service”). We are committed to handling personal data responsibly and in line with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

Information we collect

• Account information you provide at sign-up: your name, your business name, and your email address.
• Business data you enterwhile using the Service: your products, prices, stock levels, expenses, sales records, registers, staff names, and the customer details you choose to save (such as a customer's name and phone number).
• Technical data needed to run the Service: sign-in session cookies, and basic log and device information (for example, time of access and error diagnostics).

How we use your information

• To provide, secure, and operate the Service, including signing you in.
• To keep each business's data isolated from every other business.
• To respond to your requests and provide support.
• To maintain, troubleshoot, and improve the Service.
• To send you essential service messages (such as email confirmation).

We do not sell your personal data, and we do not use the data you enter about your business or your customers for advertising.

Customer data you enter

When you save details about your own customers, you are responsible for that information as its controller, including having any consent or legal basis required to collect it. iKita processes it only on your behalf to provide the Service.

During beta, customer deletion requests are handled through customer privacy redaction. A shop owner, admin, or authorized iKita support user may redact a customer record with a required reason. Redaction removes the customer's name, phone number, and email address from the active customer profile, archives the customer, and keeps only a non-identifying placeholder so historical sales and business reports remain consistent.

Redaction is intended for customer privacy requests and accidental PII cleanup. It is not a way to erase completed sales, accounting history, fraud/security records, or audit logs that we may need to retain for legitimate business, legal, or security reasons.

Service providers and storage

We use trusted providers to run iKita, including cloud hosting and database services (currently hosted in Singapore) and email delivery. These providers process data only to provide their services to us. Data is transmitted over encrypted connections, and each business's records are access-isolated.

Data retention

We keep your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data, subject to any legal obligations to retain certain records.

Customer profile details entered by a shop are retained while needed for the shop's operations. If a customer profile is redacted, the identifying profile details are removed from the live customer record immediately, while historical sales references, redaction metadata, and audit evidence are retained to protect the integrity of shop records.

Your rights

Under the Data Privacy Act, you have the right to be informed, and to access, correct, object to the processing of, and request deletion of your personal data. To exercise these rights, contact us using the details below.

Children

The Service is intended for businesses and is not directed at children.

Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above when we do, and significant changes will be communicated through the Service.

Contact

Questions about this policy or your data? Email ikita.admin@gmail.com or reach us through our contact form.