Privacy policy

Who is responsible

Solucraft Software Technologies (“we”) operates Haq. For the payment records a shop verifies, the shop decides which payments to check; we process those records to provide the service to the shop.

What we collect

• Account details: the shop's name, the names and email addresses of its owners and cashiers, and a one-way hash of each password. We never store the password itself.
• Shop accounts: the bank account and wallet numbers the owner registers, so Haq can check that a payment reached them.
• Verification records: for each check, the bank or wallet, the transaction reference, the amount, the date and time, the payer and receiver details shown on the bank's receipt, the result, and which cashier ran it.
• Device and security data: what the app needs to stay secure and send notifications, such as an app-integrity token from Google Firebase App Check and a push notification token.
• When you contact us: your phone number or Telegram name, and what you tell us.
• On this website: if analytics is switched on, Google Analytics records the pages viewed and buttons clicked, using cookies.

What we don't collect

• The customer's screenshot. It is read on the cashier's phone, and the picture itself never reaches our servers. Only the details needed for the check are sent.
• Anything from the customer directly. Customers don't install anything or create an account.
• Bank passwords or PINs. Haq never logs in to a bank account and never moves money.

How we use it

• To verify payments with the bank or wallet that issued them.
• To stop reused receipts: once a reference is verified anywhere on Haq, it is flagged if it is shown again.
• To show owners each cashier's checks, totals and history.
• To keep accounts secure and the service available, for example by slowing down repeated wrong passwords and limiting abuse.
• To give support, and to bill shops on paid plans.
• To improve Haq, using aggregated information that doesn't identify anyone.

We don't sell personal information, and we don't use it for advertising.

Who we share it with

• The bank or wallet that issued a receipt: we send it the transaction reference to get its official receipt.
• Service providers that host and protect Haq, such as cloud hosting and Google Firebase, under confidentiality obligations.
• Authorities, when the law requires it.

Inside Haq, a shop's data is visible only to that shop: owners see everything for their shop, and cashiers see their own checks.

How long we keep it

We keep account and verification data while the shop's account is open, so owners can look up their history. We may keep transaction references after that, so the same receipt keeps getting stopped if it is shown again.

When an account is closed, we delete or anonymise what we no longer need, unless the law requires us to keep it longer.

How we protect it

All connections are encrypted (HTTPS). Passwords are stored as one-way hashes. Sign-in tokens are kept in the phone's secure storage. Each shop's data is kept apart from every other shop's, and staff can see only what their role allows.

Your rights

Under Ethiopia's Personal Data Protection Proclamation (No. 1321/2024), you can ask to see the personal information we hold about you, to correct it, to delete it, or to object to how it is used. Cashiers can ask their shop owner or contact us directly. We may need to confirm who you are before we act on a request.

Children

Haq is a tool for businesses and is not meant for anyone under 18.

Changes to this policy

When we change this policy, we update the date at the top of this page. If a change matters for how your data is used, we will also tell shop owners in the app.

Contact

Solucraft Software Technologies, Addis Ababa, Ethiopia. Phone: +251 961 261 683. Email: sales@solucrafts.com. Telegram: t.me/meridiansystems.