Privacy policy

What we hold about you and your business, why we hold it, and what you can do about it. Written to be read.

Working draft
Working draft, not yet reviewed by a lawyer. This page describes how Diwaan works in its first pilot, by invitation. It will be replaced by reviewed text, and account owners will be told when that happens.

Who we are

Diwaan provides software for keeping a shop's trading record. Diwaan is not yet a registered company; this page will name the company when there is one. For questions about privacy, write to hello@diwaan.app.

Two kinds of information

We hold information in two different roles, and the rules differ:

  • Your business's records. Sales, payments, debts, stock and the books you keep in Diwaan belong to your business. We process them only to provide the service. Your business decides what goes in and who can see it.
  • Information about you as a person who signs in. Your name, phone, email and your role in the business.

What we collect

  • Account details: name, phone number, email, business name and role.
  • Website forms: what you type when you write to us: your name, business, email, phone and message, and which page you were on.
  • Who recorded what: every record carries the person and the phone that made it, so a correction can be traced.

Why we use it

  • To provide Diwaan, keep it secure and fix problems.
  • To answer you when you contact us.

We do not sell personal information. We do not use your business's records to advertise to you or anyone else.

Who we share it with

These providers run Diwaan for us. Each may use information only to provide its service to us.

ProviderWhat they do for usWhat they receive
Hostinger (Lithuania, EU)Runs the Diwaan server and its databaseEverything Diwaan processes: your business's records and account details
Cloudflare (Western Europe)Carries the traffic between your phone and Diwaan's server, and keeps a copy of each night's backup in Western EuropeWhat passes between your phone and Diwaan's server; backup copies locked with a key before they leave Diwaan's server, a key Cloudflare does not have
Yegara, on servers run by Frantech (Luxembourg, EU)Sends Diwaan's emailRecipient address and the message

We will list any other provider here before we start using it. We disclose information to authorities only when the law requires it.

Where it is stored

Records are stored on Diwaan's server in Lithuania (EU), run by Hostinger, and travel over an encrypted connection. Each night's backup is kept on that server, and a copy, locked with a key only Diwaan holds, is kept by Cloudflare in Western Europe. Records are not yet stored in Ethiopia. While a shop is being set up, a draft of the figures typed (the items counted with their costs, and the money held) is kept on that phone until the opening is posted or the person signs out, and Diwaan also clears it when the sign-in runs out with no set-up open on that phone.

Your choices and rights

You can ask to see, correct or export your information. Write to hello@diwaan.app. If your business uses Diwaan and you are one of its customers or staff, contact that business first. They control their records.

Changes to this page

When this draft is replaced, account owners will be told.