Privacy Policy
Last updated: July 3, 2026
OgaProfit is an offline-first business management app. Your business data lives on your device first. Cloud sync is optional and used only for backup and multi-device access. We do not sell your data to anyone.
1. Who We Are
OgaProfit ("we", "our", "us") is a business operating system designed for Nigerian small and medium-sized traders. The app is developed and operated by OgaProfit (contact: [email protected]).
This Privacy Policy explains what information we collect, how we use it, and your rights as a user of the OgaProfit mobile application ("App") and website at ogaprofit.com.
2. Information We Collect
2.1 Information You Provide
| Data |
Purpose |
Where Stored |
| Phone number |
Account identity, login |
Device + server (if sync enabled) |
| Business name |
Store identification, receipts |
Device + server (if sync enabled) |
| Worker names |
Staff management, audit trail |
Device + server (if sync enabled) |
| Product names and prices |
Inventory and sales |
Device + server (if sync enabled) |
| Sales and purchase records |
Business accounting |
Device + server (if sync enabled) |
| Customer names and phone numbers |
Credit tracking, receipts |
Device + server (if sync enabled) |
| Expense records |
Cash flow management |
Device + server (if sync enabled) |
2.2 Information Collected Automatically
- Device information: Operating system version, app version, device model — used for crash reporting and compatibility.
- Error and crash logs: Sent to Sentry (our error monitoring service) when the app crashes or encounters an error.
- Sync activity: Timestamps of when data was synced — used to detect sync issues.
What we never collect: Your PIN, fingerprint data, or any biometric information. Your 6-digit PIN is hashed with SHA-256 + a random salt and stored only on your device in Android's secure enclave (Keystore). It never leaves your phone — not to our servers, not to anyone.
3. How We Use Your Information
- To operate the OgaProfit app and provide its core features (POS, inventory, reports)
- To sync your data across multiple devices when you enable cloud backup
- To send WhatsApp daily summary reports to the business owner (Phase 3 — opt-in only)
- To diagnose crashes and fix bugs using anonymised error reports
- To enforce multi-tenant security — your data is always isolated from other businesses
- To detect and prevent fraud within your own business (audit logs, transaction trails)
4. Offline-First Architecture
OgaProfit is designed to work without internet. Your device is the primary database. All core features — sales, inventory, cashbook, reports — work fully offline.
Cloud sync is optional. When enabled, your data is encrypted in transit (TLS 1.2+) and stored on secured servers hosted by DigitalOcean in the United States. You can disable cloud sync at any time in Settings.
5. Data Sharing
We do not sell, trade, or rent your personal information. We share data only with:
| Third Party |
Purpose |
Data Shared |
| DigitalOcean (USA) |
Cloud hosting and database |
Encrypted business data (sync only) |
| Sentry (USA) |
Crash and error reporting |
Anonymous error logs, device info. No names, phone numbers, or financial amounts. |
| Meta (WhatsApp Business API) |
Daily summary notifications |
Business owner phone number + summary counts (Phase 3, opt-in only) |
We may disclose information if required by Nigerian law or a valid court order.
6. Data Retention
- Local device data: Retained until you delete the app or clear app data.
- Cloud-synced data: Retained while your account is active.
- After account deletion: All server-side data is deleted within 30 days.
- Error logs (Sentry): Automatically purged after 90 days.
Financial records (sales, purchases, cash entries) cannot be edited or deleted within the app — this is by design to prevent fraud. Account deletion removes all records permanently.
7. Security
- All data in transit is encrypted with TLS 1.2+
- PINs are hashed with SHA-256 + random salt, stored in Android Keystore — never transmitted
- Biometric data (fingerprint) is processed entirely by the Android OS — OgaProfit never has access to it
- Server access requires JWT authentication with 15-minute expiry tokens
- Every request is validated against your business ID — cross-business data access is impossible
- Lockout after 3 failed PIN attempts for 15 minutes
8. Your Rights
As a user of OgaProfit, you have the right to:
- Access: Request a copy of your data by emailing [email protected]
- Correction: Update your business name, phone number, or worker details within the app
- Deletion: Request permanent account and data deletion — see our Account Deletion page
- Portability: Export your sales and inventory data from the Reports section
- Opt-out: Disable cloud sync at any time in Settings → Cloud Sync
9. Children's Privacy
OgaProfit is intended for business owners and workers aged 18 and above. We do not knowingly collect data from anyone under 18. If you believe a minor has registered an account, contact us at [email protected] and we will delete the account.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify users via the app. Continued use of OgaProfit after changes constitutes acceptance of the updated policy.
11. Contact Us
For privacy questions, data requests, or account deletion: