Pearl Ledger › Legal

Privacy Policy

How Pearl Ledger collects, uses and protects your information.

Last updated: 1 January 2026 • Effective: 1 January 2026

1. Overview

Pearl Ledger Ltd ("Pearl Ledger", "we", "us", "our") operates the Byangu POS mobile application and the website pearlledgerltd.com (collectively, "Services"). This Privacy Policy explains how we collect, use, disclose and safeguard your information when you use our Services.

By using our Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use our Services.

Our registered place of business is Nakasero, Kampala, Uganda. This Policy is governed by the laws of Uganda.

2. Data We Collect

2.1 Account Information

When you register for Byangu POS, we collect your name, email address, phone number, business name, and a password (stored as a secure hash — we never store plaintext passwords).

2.2 Business Data

Byangu POS stores business records that you create, including product catalogues, sales transactions, inventory records, customer details, staff accounts, and financial summaries. This data belongs to you, and we act only as a processor on your behalf.

2.3 Device & Usage Data

We may collect information about the device you use to access our Services, including device model, operating system version, app version, and general usage patterns (features used, session duration). This data is used solely to improve performance and diagnose issues.

2.4 Location Data

Byangu POS requests location permission to enable GPS-based shop registration and to support delivery address features. Location data is used only for the specific in-app features you activate and is not sold or shared with third parties for advertising purposes. Background location is requested only where required by a specific feature and is clearly disclosed within the app.

2.5 Payment Data

When you subscribe to a Pearl Ledger plan, payment processing is handled by Pesapal Limited. We do not store your card numbers or mobile money account credentials. We receive only a transaction reference and status from Pesapal to activate or maintain your subscription.

3. How We Use Your Data

We use the information we collect to:

  • Provide, maintain and improve the Services
  • Authenticate your account and maintain session security
  • Process subscription payments via Pesapal
  • Send transactional communications (receipts, account alerts)
  • Respond to support requests
  • Monitor service health, diagnose errors, and prevent abuse
  • Comply with legal obligations

We do not sell your personal data. We do not use your business data to train machine learning models or for any purpose other than delivering the Services to you.

4. Third-Party Services

4.1 Pesapal

Subscription payments and in-app mobile money transactions are processed by Pesapal Limited. When you make a payment, you are subject to Pesapal's own Privacy Policy and Terms of Service. Pearl Ledger receives only a payment confirmation — we do not receive or store your financial credentials.

4.2 Cloud Hosting

Our backend infrastructure is hosted on servers in a secure data centre. Server access is restricted to authorised Pearl Ledger personnel only. Data at rest is encrypted.

4.3 Google Play

The Byangu POS Android application is distributed via Google Play Store. Google's own Privacy Policy governs any data collected by Google as part of the distribution process.

5. Data Security

We implement industry-standard security measures to protect your data:

  • All data in transit is encrypted via HTTPS / TLS 1.2+
  • Passwords are stored using strong cryptographic hashing (never in plaintext)
  • API access is protected by JSON Web Token (JWT) authentication
  • Our servers are protected by firewall rules and access controls
  • Data backups are performed regularly and stored securely

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — request that inaccurate personal data be corrected
  • Deletion — request deletion of your personal data, subject to legal obligations
  • Portability — request your business data in a machine-readable format
  • Restriction — request that we restrict processing of your data in certain circumstances
  • Withdrawal of consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at info@pearlledgerltd.com. We will respond within 30 days.

7. Data Retention

We retain your account and business data for as long as your subscription is active plus a grace period of 90 days after cancellation. After this period, your data will be deleted unless we are required by law to retain it for longer.

You may request immediate deletion of your account and all associated data at any time by contacting us.

8. Children

Our Services are intended for use by businesses and are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify you via the email address associated with your account. Your continued use of our Services after any update constitutes acceptance of the revised Policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact Pearl Ledger at: