01Who we are
Tabworthy is run by TABWORTHY, a business registered in Ghana under number BN923010726, at Unnumbered House, Nii Darko Street, near Assemblies of God-North, Accra, Greater Accra, Ghana. In this policy, "Tabworthy", "we" and "us" mean that business.
This policy covers two groups of people, and we play a different role for each.
- Merchants and their staff, meaning the people who sign in and use the app. We decide how account information is used, so we are responsible for it.
- Customers of those businesses, meaning people whose details a merchant saves to run a tab or keep a customer record. The merchant decides what is kept about them, and we hold it on the merchant's behalf. If you are a customer and want your details changed or removed, please ask the business first. They can do it in the app. If you cannot reach them, contact us and we will help.
02Information we collect
Account information
Your name, email address, phone number, password and the country your business trades in. We never store your password in readable form.
Business information
Your business name, logo, country, currency, time zone and type of business, a contact phone number and email if you add them, and the details of each branch you create.
Staff
For each member of staff you add: their name, phone number, role, branch and till PIN.PINs are stored only as a one-way hash (argon2id), so nobody, including us, can read a PIN back.
Devices
For each device signed in to your business: the name you give it, its platform, the app version, its branch and when it was last used. This lets you see your devices and sign out one that is lost.
Sales and business records
What you record while using the app: products and prices, stock levels, orders and the items on them, payments and how they were made, shifts, cash drawer counts, and the reports built from them.
Support
If you contact us by WhatsApp or email, we keep that conversation. When you open support from the app, your business name is added to the first message so we know who is asking.
Applications to join
If you apply through the Join page on this website, we collect what the form asks for: your name, phone number and email, your business's name, type and location, and your answers about how you run it today.
How the app is working
The app keeps a record of how it is running and sends it to us. This starts the first time the app is opened, before an account exists. It includes which screens were opened and for how long, the number of taps, how far someone got through first-time setup, how a sale was paid (cash, mobile money or card), how long the app took to start, and the type and location of any error, along with the names of the last few screens opened before it.
If the app crashed, froze or was closed by the phone the last time it ran, it reads the report your phone keeps about that (MetricKit on iPhone and iPad, exit reasons on Android) and adds a summary: what kind of ending it was, when it happened, the app version and technical codes. It does not include your phone's own description of the problem.
This record never includes anything a person types: no names, business names, phone numbers, email addresses, codes, passwords, prices or amounts of money. Before you create an account, it is linked only to a random number generated on your device. We use it to find problems and improve the app, and we keep it for 90 days.
The app contains no third-party analytics, advertising or crash-reporting tools, and this website does not use tracking cookies or analytics. The information above comes to us and to no one else, and we do not use it to build a profile of you or to show you ads.
03Your customers
A merchant can save a customer against a tab or a sale. When they do, the app may hold the customer's name, phone number, WhatsApp number, mobile money number, a note, how many times they have visited, when they last visited and any balance they owe.
None of this is needed to make a sale. The name field is free text, and many merchants use it for something like "Table 4". The merchant decides what to record and can remove a customer at any time, which removes them from every device in the business.
We process this information only to show it back to the business that recorded it and to carry out the payments that business takes. We do not market to a business's customers, sell their details, or use them for any other purpose.
04The TabWorthy Pass
The TabWorthy Pass lets customers give a business their details themselves. You scan the business's code, fill in a card at tabworthy.app/pass, and hand it over. There is no app to download and no account to create.
What stays on your phone
Your Pass holds your name, phone number, the mobile money number you pay from, whether businesses may contact you on WhatsApp, the design you chose, and a list of the places you have handed it to. It is stored in the browser on your phone and nowhere else. We do not keep a copy, and no one, including us, has a list of the places you have used it.
If you make a Pass on a computer, you can move it to your phone with a code or a link. The Pass travels in the part of the link after the #, which browsers do not send to any server, so it does not pass through us. When you share your Pass, a picture of it is made on your own device, without your phone number, and goes only where you send it.
What a business receives
The first business you hand your Pass to receives your name, phone number, the mobile money number you pay from (if you added one) and whether it may contact you on WhatsApp. After that, each business receives your name, and you choose whether to share the rest. What you share is saved in that business's customer records, along with a random code for your Pass so the business does not record you twice. If you scanned the code at the till while paying, the business also learns which bill was yours.
From then on, that information belongs to the business's records, as described above. It is never shared with another business, and our own records of the hand-over do not include your name or number.
Removing your Pass
To remove your Pass from a phone, open tabworthy.app/pass and choose Remove my Pass from this phone. Clearing your browser data also removes it. This does not remove you from a business's customer records. To be removed, ask the business, or contact us if you cannot reach them.
05Receipt links
When a merchant sends a receipt by WhatsApp from an iPhone or iPad, the receipt is saved as a PDF and the message includes a link to it at tabworthy.app/r/. On Android, the PDF is attached to the message directly and is not stored with us.
A receipt shows what the customer would get on paper: the business's name and address, the items, the amounts, and the customer's name if the sale was in their name. It never shows the customer's phone number.
Anyone who has the link can open the receipt. Each link contains a long random code that cannot be guessed, and receipts cannot be listed or searched. Receipt links stay available after they are sent, including after the business's account is deleted. If you want a receipt taken down, send us the link and we will remove it.
06How we use information
We use the information we collect to:
- provide the app: record sales, track stock and show a business its own figures;
- keep every device in a business up to date with the others;
- back up a business's records so a lost or broken device does not mean lost data;
- sign you in and keep people who should not have access out;
- process payments, payouts and plan payments, and calculate the fees on them;
- answer your questions and help when something goes wrong;
- find and fix problems and make the app easier to use;
- understand how Tabworthy is being used and whether it is working for the businesses that use it, as described in the next section;
- prevent fraud and misuse, and keep Tabworthy secure;
- tell you about changes to the service, to these terms or to your plan;
- review applications to join, and contact you about yours;
- meet our legal obligations.
We may combine information from many businesses into totals and statistics that do not identify any business or person, and use those to run and improve Tabworthy.
We do not sell information, use it for advertising, or share one business's figures with another business.
07What our team can see
A small team at Tabworthy uses an internal tool to support merchants and run the service. For each business, it shows:
- the business's name, type, country, plan and devices;
- its sales totals and number of sales, when it last made a sale, and how its payments split between cash, mobile money and card;
- its best-selling items, with the quantities sold;
- each staff member's name and role, with their number of sales and the amount they took;
- how many customers it has saved, and how many owe it money;
- the app activity and errors described in section 2.
We use this to answer support requests, spot and fix problems, check payments and fees, prevent fraud, and understand whether Tabworthy is working for the businesses that use it.
Each person's access depends on their role, everyone with access must keep what they see confidential, and every visit to a business's page is logged. Our team does not access a business's customer details except when needed to resolve an issue the business has raised, to maintain the service, or where the law requires it.
08Payments
When a business takes mobile money or card payments through Tabworthy, or pays for a plan, the payment is processed by Paystack, a licensed payment provider, which handles the payment details under its own privacy policy.
We never see or store full card numbers. For each payment we keep the amount, the method, the provider's reference, whether it succeeded, the fees on it, and, for mobile money, the number that was charged, since that is the number the merchant will be asked about if something goes wrong.
To send a business its money, we also keep the bank or mobile money account the owner chooses for payouts, and a record of each payout made to it.
09Who we share it with
We share information only with the following, and only for the reasons given:
- Supabase, which provides our database, sign-in and file storage.
- Paystack, which processes payments and payouts.
- Vercel, which hosts this website and the internal tool described in section 7, and carries a TabWorthy Pass from the page to the business it is handed to without keeping it.
- Notion, where we keep applications to join.
- WhatsApp, when you contact us there.
We may also share information when the law requires it, to protect people or the service from fraud or harm, with a buyer or successor if our business is sold or reorganised (who would then be bound by this policy), or when you ask us to.
We do not sell or trade information, and we do not share it with advertisers.
10Where it is stored
Tabworthy works offline, so a business's records are kept in two places.
- On the device. The database on each phone or tablet is encrypted with SQLCipher (AES-256). The key is kept in the device's secure storage (the iOS Keychain or the Android Keystore), not in the app's files.
- In the cloud. A copy is kept with Supabase on servers in the European Union (Frankfurt), encrypted in transit and at rest. The database itself prevents one business from reading another's records.
If you are in Ghana or anywhere else outside the European Union, this means your information is stored outside your country. We chose the European region for the protections that come with it.
11Photos and permissions
The app asks for access to your photos so you can add pictures to the items you sell. The photo you choose becomes the item's picture and is stored and synced with the rest of your business's records.
The app does not read or scan your photo library in the background and takes only the photos you choose. If you do not give permission, everything else still works, and items without a photo are shown as a coloured tile with their initials.
12How long we keep it
We keep a business's records for as long as its account is open, because a business may need to look back over past years. App activity records are kept for 90 days.
You can delete your account in the app, under Settings. This deletes the business and everything in it, including staff, products, customers, orders and photos. We may keep some records for longer where the law requires it, such as records of payments, and backups are cleared on their own schedule rather than immediately. Receipt links are handled as described in section 5.
If you no longer have the app or cannot sign in, email hello@tabworthy.app from the address on your account with the subject "Delete my Tabworthy account". We will confirm it is you, delete the account within 30 days, and let you know when it is done.
Removing the app from a device does not delete your account. The copy on that device is removed with the app, but the copy in the cloud stays until the account is deleted, which is how you can sign in on a new device and find your business as you left it.
13Your rights
Under Ghana's Data Protection Act, 2012 (Act 843), and the GDPR where it applies to you, you can ask to see the information we hold about you, have it corrected or deleted, object to how we use it, or receive a copy to take elsewhere.
You can do most of this yourself in the app: edit your details, remove a customer, delete your account, or export all your business's records as CSV files from Settings. For anything else, email hello@tabworthy.app and we will respond within 30 days.
If you are a customer of a business that uses Tabworthy, please send requests about that business's records to the business. We will help it respond.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to Ghana's Data Protection Commission, or to the data protection authority where you live.
14Security
- The database on each device is encrypted, and its key is kept in the device's secure storage.
- Everything sent between the app and our servers is encrypted.
- Passwords and till PINs are stored only as one-way hashes.
- The database prevents one business from reading another's records.
- An owner can see every device signed in to their business and sign any of them out.
- Our team's access is limited by role and logged.
No system is completely secure. If a security incident affects your information, we will tell you promptly, explain what happened, and notify the authorities where the law requires.
15Children
Tabworthy is a tool for businesses and is not meant for children. Accounts are for people aged 18 or over, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
16Changes and contact
If we make an important change to this policy, we will tell you in the app or by email before it takes effect. The date at the top of this page shows when it was last changed.
For questions or requests, email hello@tabworthy.app, message us on WhatsApp at +233 59 240 2005, or write to TABWORTHY, P.O. Box 22, Accra, Ghana.