Privacy Policy

1. Scope

This Privacy Policy explains how Xalo Software collects, uses, stores, and protects information when you use a Musika app. Musika is local-first: day-to-day selling works from your device's local storage and keeps working without internet. Creating your Musika account and business, and managing your license and devices, happen online, so some information is stored in the cloud.

2. Information We Collect

2.1 Account Information

When you create a Musika account we collect and store:

• Your email address and name
• Your phone number and profile photo, if you add them
• Your password, which is stored in protected form and is never readable by us

2.2 Business and Staff Information

For each business you create, we store:

• Business and shop details (names, contact details, settings)
• Staff members you add and their roles
• Records of important account changes (an audit log)

2.3 Business Data (Sales, Stock, Customers)

Your day-to-day business data — sales, products, stock levels, customer records, suppliers, expenses, prices, receipts, and product photos — is created and stored on your device first, so it works fully offline.

What is copied to the cloud depends on your plan:

• Starter: business data stays on your device.
• Standard: you can sync your data to the cloud manually.
• Pro and Enterprise: your data syncs to the cloud automatically across your devices and shops.

When your data syncs, it is stored in Musika's cloud database (see Section 8) so it can be backed up and shared between your devices. Reports and other calculated figures are worked out from your records and are not stored as separate data.

2.4 Device Information

To enforce the number of devices your plan allows, and to keep your business secure, we store for each device you use with Musika:

• A device name and platform (for example, Android)
• A technical device identifier used to recognise the device
• When the device was last active, and whether it is trusted and which shop it is assigned to

2.5 License Information

Your plan, license term, and which devices are covered are managed by Sekiwa, the licensing service Musika uses. After your device checks in online, it keeps a signed copy of your license so the app can keep working without internet until the next check, which is required at least every 7 days.

2.6 Referral Program

If you take part in a Musika referral or rewards program, we store the names, business names, and contact details (email or phone) of the referrer and the person referred, so we can track and credit rewards.

2.7 Support Communications

When you contact support by email, WhatsApp, phone, or other channels, we keep your contact details, your inquiry, and anything you share to help us fix the problem.

2.8 What We Do Not Collect

• We do not collect analytics, usage statistics, or crash reports from the app.
• We do not use advertising trackers.
• We do not collect your location or your phone contacts.

2.9 Device Permissions

Musika may ask for these permissions on your device:

• Camera — to scan barcodes and take product or profile photos
• Bluetooth — to connect to receipt printers
• Notifications — to show alerts such as low stock
• Install updates — to install a new version of the app that you download

3. How We Use Information

Data Type	Purpose
Account data	Signing you in, recovering your account, contacting you
Business data	Running your business in the app, backup and multi-device sync
Device data	Device limits, trust and security
License data	License verification, activation, renewal
Referral data	Tracking and crediting referral rewards
Support records	Customer service, issue resolution

We do not use your data for:

• Advertising or marketing to third parties
• Selling to third parties
• Profiling or automated decision-making

4. Data Sharing

We do not sell, rent, or trade your personal information or business data.

We may share information only:

• With the service providers that run Musika (Section 8), who process it for us
• With your explicit consent
• To comply with legal obligations or lawful requests from authorities in Zimbabwe
• To enforce our Terms of Service and EULA
• With professional advisors (legal, accounting) bound by confidentiality

5. Data Security

We use reasonable technical and organizational measures to protect your data:

• Data is encrypted in transit between the app and our cloud services
• License information is cryptographically signed and verified by the app
• Business data on your device is kept in the app's private storage

You are responsible for securing your device with a PIN, password, or biometric lock, and for keeping your Musika sign-in details private.

6. Data Retention

• Account and business data (cloud): Kept while your account is active. You can delete a business and your Musika account from the app. To delete your account you must first delete or transfer every business you own. When a business or account is deleted, its cloud data is removed.
• Business data (device): Kept on your device until you uninstall the app, reset app data, or delete records. Deleting your cloud account does not delete data stored only on your device.
• License records: Kept as long as needed to manage your license and prevent misuse.
• Support records: Kept for the duration of the support inquiry plus 12 months.

7. Your Rights

Depending on applicable law, you may have the right to:

• Access information we hold about you
• Request correction of inaccurate data
• Delete your business and account from the app, or ask us to delete your data, subject to legal obligations
• Request a copy of your business data through support

To exercise these rights, contact xalosoftware@gmail.com.

8. Third-Party Services

Musika relies on these services:

• Convex — our cloud database and backend, where account, business, device, and synced business data are stored and processed. See Convex's Privacy Policy.
• Sekiwa — the licensing service that manages plans, license terms, and device limits.

These providers have their own privacy policies, which we encourage you to review.

9. Children's Privacy

Musika is a business tool for adults. Our Terms of Service require users to be at least 18 years old or to have the consent of a parent or legal guardian. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted at musika.xalosoftware.com/privacy and, where appropriate, notified through the app. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related inquiries:

Channel	Details
Email	xalosoftware@gmail.com
Phone	+263785629957
Web	https://xalosoftware.com
Address	Kariba, Nyamhunga 1, Zimbabwe