1. Who operates the app
The Rossy Baby & Mum application is a managed business app for Rossy Baby & Mum. Its software, hosting and technical operations are provided by Depar Technologies Limited through the Tenga platform. In this policy, “we”, “us” and “our” refer to Rossy Baby & Mum and Depar Technologies Limited as applicable to their respective business and technical responsibilities.
Privacy questions can be sent to hello@tenga.co.zm.
2. Who may use it
The app is intended for the owner and authorized staff of Rossy Baby & Mum. It does not offer public customer account creation. Accounts are created or invited by an authorized business owner or administrator.
3. Information we process
Accounts and access
Names, email addresses or usernames, telephone numbers, encrypted authentication credentials, roles, permissions, branch assignments and account-security events.
Business operations
Products, barcodes, product images, stock levels, suppliers, customers, sales, returns and refunds, expenses, receipts, branch information, staff activity, audit history and reports entered by authorized users.
Device and diagnostics
Device identifiers, app and operating-system versions, network and synchronization status, IP address, push-notification tokens, crash reports, diagnostic information and security logs. Authorized business data may be stored locally on a device for offline use and synchronized when connectivity returns.
Camera, photos and notifications
Camera access is used only when a user chooses to scan a barcode, pair a scanner or take a product photo. Photo access is used only when a user selects an image. Notification permission is used for enabled business or security alerts. The app does not use the camera or photo library in the background.
4. Why information is used
- Authenticate users and enforce roles and branch permissions.
- Record sales, update inventory and produce receipts and reports.
- Support offline operation, device pairing and synchronization.
- Send enabled operational and security notifications.
- Prevent fraud, investigate incidents and maintain audit history.
- Provide support, improve reliability and comply with law.
We do not sell personal information and do not use Rossy business records for third-party targeted advertising.
5. Service providers and sharing
We use providers for cloud database and authentication, file storage, hosting, transactional email, push notifications and error monitoring. They process information to provide contracted services and are expected to protect it. Information may also be disclosed when required by law, needed to protect the app or its users, or directed by an authorized Rossy owner.
6. Security and international processing
We use access controls, tenant separation, encrypted network connections, protected credentials, backups and monitoring designed to safeguard data. Users must protect their credentials and devices. Providers may process information outside Zambia under contractual and technical safeguards.
7. Retention and deletion
Information is generally retained while required for Rossy Baby & Mum’s operations. Following an approved deletion request, covered information is deleted or de-identified within a reasonable period, normally within 30 days. Secured backup copies may remain until normal rotation completes.
Limited records may be retained for legal, tax, accounting, fraud-prevention, security, dispute or regulatory purposes, with access restricted to those purposes. See the Account and Data Deletion Policy.
8. Your choices
Authorized users may request access, correction or deletion of their profile information. Because Rossy Baby & Mum controls its business workspace, staff should first contact the organization owner. Requests can also be submitted through our public deletion page. Notification and camera permissions can be managed in device settings.
9. Children and changes
This is a workforce and business operations app, not a service directed to children. Authorized users must be at least 18 or otherwise legally permitted to use the app for their work. We may update this policy and will publish the new date here, with additional notice where required.