Privacy Policy

Effective 26 October 2026

In short: your business records belong to you. We use them only to run Ledja for you. We do not sell data, show adverts or track you across other websites. You can download your data or ask us to delete it at any time.

1. Who we are

Ledja is a shop management app provided by RK Technologies LLP, trading as R-TECK ("R-TECK", "we", "us"), a company in Uganda. This policy explains how we handle personal data when you use Ledja at ledja.rteckuganda.com and as an app installed from there. It is written to meet the Data Protection and Privacy Act, 2019 and the Data Protection and Privacy Regulations, 2021 of Uganda.

2. Two kinds of data, two roles

Data	Our role
Account data: names, phone numbers, passwords and PINs of the owner and staff who use Ledja, and how they use it.	R-TECK is the data controller.
Business records: what a shop keeps in Ledja about its own customers and suppliers (names, phone numbers, purchases, balances owed), its sales, stock, expenses and receipt photos.	The shop is the data controller. R-TECK is the data processor and handles these records only on the shop's instructions, to provide Ledja.

If you are a customer of a shop that uses Ledja and have questions about your information, please contact the shop first. We will help the shop answer you.

3. What we collect

When you sign up and use Ledja: business name; your name and phone number; your password and PIN (stored only as one-way hashes, never in readable form); the names, roles and PINs (hashed) of staff you add.
What you record: items, prices and costs, sales and receipts, stock movements, customers and suppliers with their phone numbers and balances, payments, expenses, cash-ups, and photos of paper receipts you choose to attach.
Technical data: the type of phone and browser, IP address and times of requests in our server logs, and sync status. These keep the service secure and working.
Support messages: what you write to us and, if you choose, technical details from your phone (app version, sync status, problems) to help us fix issues.
Visit counts: when someone opens our website or the app, we count the visit on our own server: the page, the site that linked to it, and the type of device. To count each person once a day, we keep a code made from the IP address and browser that changes every day and can't be turned back into either. We don't store the IP address with it, and the counts are deleted after 13 months.

We do not collect your location, contacts or files, use advertising or analytics trackers, or use cookies for tracking. Ledja stores your login on your phone so it can work without internet.

4. Why we use it

To provide Ledja: keep your records, sync them between your phones, produce reports and receipts (performance of our agreement with you).
To keep accounts and data secure, prevent fraud and misuse, and keep backups (our legitimate interest and legal duties).
To answer support requests and tell you about important changes to Ledja.
To meet legal obligations, for example a lawful request from a Ugandan authority.

We will ask for your consent before using personal data for any other purpose, such as marketing messages.

5. Where data is stored

Records are saved on your phone (so Ledja works offline) and on our servers. Our servers are hosted by Contabo GmbH in Germany, in the European Union, where personal data is protected by the EU General Data Protection Regulation. By using Ledja you understand that your data is stored outside Uganda in this way. Some data may also pass through providers we use to run the service, such as our email provider for support messages.

6. Who we share it with

We do not sell or rent personal data. We share it only with: service providers that host or help run Ledja, under confidentiality obligations; authorities when the law requires it; and a buyer or successor if R-TECK's business is transferred, who must keep this policy. Inside a shop, what each staff member can see depends on the role the owner gives them.

A small number of R-TECK support staff can see, to help you: the business name, the names, roles and phone numbers of its users, which phones are logged in and when they were last used, how many records of each kind the business has, and your support messages. They don't see your sales amounts, prices, customers or suppliers in this way. Every action they take on an account is recorded.

7. How we protect it

All connections use HTTPS encryption.
Passwords and PINs are stored as salted one-way hashes.
Each business can only access its own records; receipt photos are private to the business that took them.
Staff roles limit who can change prices, stock and records; every change records who made it.
We keep daily backups and monitor the service.

No system is perfectly secure. Keep your password and PIN private and lock your phone. If we learn of a breach that affects your personal data, we will notify you and the Personal Data Protection Office as the law requires.

8. How long we keep it

We keep your data while your account is active. If you ask us to delete your business account, we delete its records within 30 days, and backups containing them expire within a further 30 days, unless the law requires us to keep something longer. Server logs are kept only for a limited period and then deleted. Remember that you may need your own records for tax purposes: download them before deleting your account.

9. Your rights

Under the Data Protection and Privacy Act you may ask to access the personal data we hold about you, correct it, have it deleted, or object to how we use it. Owners can download their business data at any time under More → Account & data. To make any request, use More → Help & support in the app. We will respond within 30 days. You may also complain to the Personal Data Protection Office (pdpo.go.ug).

10. Shops' responsibilities

When you record your customers' and suppliers' details, you are responsible for having a good reason to keep them, keeping them accurate, and using them fairly, for example only sending payment reminders to people who owe you. Ledja's WhatsApp messages are sent from your own phone.

11. Children

Ledja is for businesses and is not meant for people under 18. We do not knowingly collect children's data as account holders.

12. Changes to this policy

We may update this policy. We will show the new date here and tell you in the app about important changes before they take effect.

13. Contact

RK Technologies LLP (R-TECK), Uganda. Contact us through Help & support in the app, on WhatsApp at +256 762 117727, or at rteckuganda.com. To delete your account, see Delete your account.