Privacy Policy

This policy explains what information Little-Till collects, why we use it, who helps us handle it, how long we keep it, and the rights you have. It is written to meet South Africa's Protection of Personal Information Act (POPIA) and, for people in the United Kingdom and the European Union, the General Data Protection Regulation (GDPR).

Who we are

Little-Till is run by My Tribr (Pty) Ltd ("we", "us"), a private company registered in South Africa with registration number 2025/517708/07. We are responsible for the information described here. Our registered office is 38 Osborne Drive, Salt Rock, Ballito, KwaZulu-Natal, 4392, South Africa.

Our Information Officer is Martha Dunn, director. You can reach us about anything in this policy at [email protected].

What we collect

• Your account — your email address and password (the password is stored scrambled, never as you typed it). If you sign in with Google, Google gives us your name, email address and a link to your profile photo.
• Your business details — whatever you add in Settings, such as your business name, your name, contact details and address, the payment details you want on your invoices, and your logo.
• Your business records — the products and services you sell, prices and costs, stock, sales, invoices, quotes, payments received and expenses.
• Your customers' details — the names, phone numbers, email and postal addresses and notes you choose to save. See "Your customers' details" below.
• Your subscription — your plan, trial and paid-until dates, and a record of each payment (date, amount and PayFast reference). PayFast gives us a token to renew your subscription. We never see or store your card details.
• How you use your account — the date you signed up and when you last opened the app.
• Technical information — like any website, our hosting and database providers see your IP address and browser details when you connect, and keep short-term logs of sign-ins and requests to keep the service working and secure.

Why we use it, and our legal reasons

• To run Little-Till for you — storing and syncing your records, making invoices, reports and spreadsheets, and sending account emails such as sign-up confirmations and password resets. Legal reason: our contract with you.
• To tell you about the service — occasional emails about changes to Little-Till, new features, planned downtime or updates to these terms. Every one has a link to stop them, and stopping them does not affect your account. Legal reason: our legitimate interest in keeping our customers informed.
• To handle your subscription and payments. Legal reason: our contract with you, and the law, which requires us to keep payment records for tax.
• To keep Little-Till secure and prevent misuse, including blocking accounts that break our Terms of Service. Legal reason: our legitimate interest in protecting the service and the people who use it.
• To support you and see which accounts are active, for example when you last opened the app. Legal reason: our legitimate interest in running and improving the service.

We do not sell your information, we do not use it for advertising, and we do not use it to make automated decisions about you. We will only send you marketing emails if you have agreed to receive them, and you can stop them at any time.

Who helps us

We use a small number of trusted providers. Each one handles your information only to provide its service to us, under a data protection agreement with us.

• Supabase — our database and sign-in system. Your account and business records are stored on its servers in Ireland, in the EU.
• Cloudflare — hosts the website and delivers it to your device through servers around the world.
• PayFast (South Africa) — processes subscription payments. Your card details go straight to PayFast.
• Resend (United States) — sends our emails: account emails, such as sign-up confirmations and password resets, and our occasional emails about the service.
• Google — only if you choose to sign in with Google.

When you send an invoice or a reminder through WhatsApp, it goes through WhatsApp under WhatsApp's own terms. We may also share information when the law requires it, or to protect our rights or someone's safety.

Sending information across borders

We are based in South Africa, your records are stored in Ireland, and some of our providers are in the United States. So your information may be handled outside the country you live in, including in countries whose data protection laws are not considered equivalent to those of the UK or the EU. Where the law requires it, these transfers are protected by safeguards such as the standard contractual clauses in our providers' data protection agreements.

Your customers' details

If you save details about your own customers, you decide what to save and why. For that information you are the responsible party (the "controller" under the GDPR), and we handle it on your behalf (as your "operator" or "processor"), only to provide Little-Till to you. Our commitments are set out in the data processing terms in our Terms of Service. Please save only what you need and have a proper reason to keep.

How long we keep it

• Your account, business records and customers' details — for as long as you have an account. If your trial or subscription ends, we keep them so you can pick up where you left off if you come back.
• When you ask us to delete your account, we delete it completely within 30 days: your sign-in, email address, profile and business records. You are free to sign up again later as a new user.
• Payment records are kept in our accounting records, and by PayFast, for as long as tax law requires (currently five years in South Africa), even after an account is deleted.
• Technical logs are kept by our providers for a short period and then deleted. Deleted information may also remain in our providers' backups for a short time before it is overwritten.

The one exception is an account we have blocked for misuse. When a blocked account is deleted, we keep only its email address and the fact that it is blocked, so that it cannot be used to sign up again.

On your device

Little-Till keeps a copy of your records in your browser's storage on each device you use, so the app opens quickly and keeps working when the signal drops. When you sign out, that copy stays on the device, hidden, so that nothing you recorded offline is lost; it is shown again only when you sign back in. To remove it, clear Little-Till's site data in your browser settings.

We use this storage, and your browser's sign-in storage, only to make the app work. We do not use advertising or analytics cookies or trackers, so there is nothing to accept or decline.

Keeping it safe

Your information is encrypted when it travels between your device and our servers, and our database provider stores it encrypted. Database access rules mean each account can reach only its own records. Our admin tools show account details, such as email address, plan and dates, but not your business records; we look at business records only if you ask us to help with them or the law requires it.

No online service can be completely secure. If a security breach puts your information at risk, we will tell you, and the regulator, as the law requires.

Your rights

You can:

• see and correct most of your information yourself, in the app, at any time;
• ask for a copy of the information we hold about you, including all your business records, in a format you can take elsewhere;
• ask us to correct anything that is wrong;
• ask us to delete your account and your information;
• ask us to limit how we use your information, or object to uses based on our legitimate interests;
• withdraw any consent you have given, such as for marketing emails.

To use any of these rights, email [email protected]. We will reply within one month, and we may need to confirm it is you before we act.

If you are unhappy with how we handle your information, please tell us first so we can put it right. You can also complain to a data protection regulator: in South Africa, the Information Regulator; in the United Kingdom, the Information Commissioner's Office; in the European Union, the data protection authority in your country.

Children

Little-Till is for adults running a business. It is not meant for anyone under 18, and we do not knowingly collect children's information.

Changes to this policy

We may update this policy from time to time. We will post the new version here with a new effective date, and if a change is significant, we will let you know by email.

Contact us

Questions about your privacy, or want to use your rights? Email [email protected], or write to My Tribr (Pty) Ltd, 38 Osborne Drive, Salt Rock, Ballito, KwaZulu-Natal, 4392, South Africa.