Privacy Policy

Effective 30 October 2026

This policy explains how Eastern Megatrends Industries (Private) Limited ("EMI", "we", "us") handles personal information in the Stoka app, its sync server, and the WhatsApp messages Stoka sends. By using Stoka or receiving messages from a business that uses it, you agree to this policy.

Who is responsible

Each business or school that uses Stoka decides what records it keeps about its own customers, suppliers, students and parents, and is responsible for that data. EMI provides the software and the sync service that stores and moves that data for them. Questions can be sent to [email protected].

Information we handle

• Account information — company name, branch names, user names and a secured (hashed) password for each app user.
• Business records — stock, sales, purchases, payments and accounting entries entered by the business.
• Customer, student and contact details — names, addresses, phone and WhatsApp numbers, and for schools, student and guardian details, entered by the business.
• WhatsApp messages — the recipient's number and the content of documents and notices the business chooses to send.
• Device information — a device number and sync timestamps used to keep each device's data in step.

We do not collect location, contacts from your phone book, advertising identifiers or browsing data.

How we use it

• To run the app's features: stock control, point of sale, invoicing, accounting and school administration.
• To sync a business's data between its own devices and branches.
• To deliver invoices, receipts, statements and school notices over WhatsApp, only to people who gave the business their number and agreed to receive them.
• To provide support when a business asks us for help.

We do not use this information for advertising, and we do not sell, rent or trade it.

Where it is stored

Stoka stores data on the device in a local database. When a business syncs, its data is sent over an encrypted connection to our server, where it is kept separate from every other business's data. Only that business's signed-in devices can download it.

Sharing

We share information only:

• with Meta Platforms (WhatsApp), which carries WhatsApp messages to their recipients under the WhatsApp Business Policy;
• with our hosting provider, which stores our server and its database;
• with the Zimbabwe Revenue Authority, where a business uses fiscalisation and the law requires invoices to be reported;
• when required by law.

How long we keep it

We keep a business's data for as long as it uses Stoka. Accounting records may need to be kept for the period required by Zimbabwean tax law. When a business closes its account, or a person asks for their data to be deleted, we follow our data deletion process.

Your rights

You can ask to see, correct or delete personal information held about you, and you can stop WhatsApp messages at any time by replying STOP or asking the business that sent them. Contact the business you deal with, or email us at [email protected].

Security

Passwords are stored only as salted hashes, data travels over encrypted connections, and each business's data is isolated on our server.

Children

Schools use Stoka to keep student records. Those records are entered and managed by the school; messages about a student are sent to the parent or guardian, not to the student.

Changes

We may update this policy. The effective date above shows when it last changed.

Contact