BalaBala
Back to home

Privacy Policy

Last updated: May 2025

1. Introduction

Bala ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our WhatsApp-based bookkeeping service for Ugandan shop owners.

2. Information We Collect

Personal Information

  • WhatsApp phone number (used for authentication and communication)
  • Shop name (if you choose to provide it)

Business Data

  • Transaction records (sales, expenses, credit given/received)
  • Item names, quantities, and prices
  • Customer names (for credit tracking)
  • Voice note transcripts and receipt images (processed by AI)

Usage Data

  • Dashboard login timestamps
  • API request logs for service improvement

3. How We Use Your Information

  • Service Delivery: Process your WhatsApp messages to record transactions, track credit, and generate reports.
  • Authentication: Verify your identity via WhatsApp OTP codes.
  • AI Processing: Use Google Gemini AI to transcribe voice notes, extract data from receipt images, and parse text messages.
  • Communication: Send you transaction confirmations, OTP codes, and weekly summaries via WhatsApp.
  • Account Management: Manage your subscription, trial period, and billing.
  • Improvement: Analyze usage patterns to improve our service accuracy and features.

4. Data Storage and Security

  • Database: Your data is stored securely in PostgreSQL databases hosted on Heroku.
  • Encryption: Data in transit is encrypted using HTTPS/TLS.
  • Access Control: Only authorized personnel can access your data, and only for legitimate business purposes.
  • Retention: We retain your data for as long as your account is active. You may request deletion at any time.

5. Third-Party Services

We use the following third-party services to operate Bala:

  • Twilio: For WhatsApp messaging and OTP delivery. Their privacy policy is available at twilio.com/legal/privacy.
  • Google Cloud / Gemini AI: For AI processing of voice notes, images, and text. Your data is processed according to Google's AI data use policies. Google does not use your data to train their models.
  • Heroku: For hosting our backend services and databases.
  • Vercel: For hosting our frontend dashboard.

6. Data Sharing

We do not sell your data to third parties. We may share your data only in the following circumstances:

  • Service Providers: With trusted third-party services (listed above) necessary to operate our service.
  • Legal Requirements: When required by law, court order, or government regulation.
  • Business Transfer: In the event of a merger, acquisition, or sale of assets.

7. Your Rights

You have the following rights regarding your data:

  • Access: View all your data through the dashboard.
  • Export: Download your transaction data as CSV.
  • Deletion: Request deletion of your account and all associated data by contacting us.
  • Correction: Update your shop name and other information through the dashboard.
  • Opt-out: Stop using the service at any time by simply messaging "stop" on WhatsApp.

8. Children's Privacy

Bala is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete it.

9. International Data Transfers

Your data may be processed and stored on servers located outside Uganda. We take appropriate measures to ensure your data remains protected in accordance with this Privacy Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by sending a message via WhatsApp or updating the "Last updated" date at the top of this policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us: