Privacy Policy

Rock Kins Group Ltd ("we", "us", or "our") operates the GulaSync POS software and this website (gulasync.rockkinsgroup.com). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our services.

By using GulaSync or submitting information through this website, you agree to the practices described in this policy.

1. Information We Collect

Account and business information

When you register for GulaSync or book a demo, we collect:

• Your name and email address
• Your business name and physical address
• Your phone number (optional)
• Your country and industry type
• Your MRA Taxpayer Identification Number (TPIN) and Business Registration Number (BRN), used solely for generating compliant receipts

Transaction and usage data

When you use the GulaSync POS application, we process:

• Sales transactions and receipt records
• Product catalogue and inventory data
• Cashier session logs and activity
• Application usage analytics (feature interactions, error logs)

Technical data

We automatically collect limited technical information including device identifiers, operating system version, and application version numbers for the purpose of troubleshooting and improving our software.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the GulaSync POS service
• Process and store your business transactions securely
• Generate MRA-compliant fiscal receipts and VAT reports
• Send you service notifications, security alerts, and support communications
• Respond to your enquiries and demo requests
• Improve our software based on usage patterns
• Comply with applicable laws and regulatory obligations in Malawi

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

3. Data Storage and Security

Your data is stored on infrastructure managed by Supabase, hosted in a secure, access-controlled environment. All data transmitted between the GulaSync application and our servers is encrypted in transit using TLS. Data stored locally on your Windows device by the GulaSync application is AES-encrypted.

We implement appropriate technical and organisational measures to protect your information against unauthorised access, loss, or disclosure.

4. Third-Party Services

We use the following third-party services to operate GulaSync:

• Supabase— database hosting and authentication. Data is stored in a GDPR-compliant cloud environment.
• Resend— transactional email delivery for contact form responses and service notifications.

Each of these providers is bound by their own privacy policies and data processing agreements. We only share the minimum data necessary for each service to function.

5. Data Retention

We retain your account and transaction data for as long as your subscription is active and for up to 7 years after account closure to comply with Malawi tax record-keeping requirements under the Taxation Act.

Contact form enquiries are retained for up to 2 years.

6. Your Rights

You have the right to:

• Access a copy of the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your account and associated data (subject to legal retention obligations)
• Object to or restrict certain processing activities
• Receive your data in a portable format

To exercise any of these rights, please contact us at hello@rockkins.com.

7. Cookies

This website uses cookies to function correctly and to analyse usage. For details on the cookies we use and how to manage them, please read our Cookie Policy.

8. Children's Privacy

GulaSync is a business software product. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently collected such data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Rock Kins Group Ltd
Email: hello@rockkins.com
Website: gulasync.rockkinsgroup.com