Privacy policy

Last updated 27 August 2026

This document has not yet been reviewed by a lawyer. It was drafted from what the Plainn software actually does, and it is accurate as a description of the system. It is published so the product has a policy to point at; it should be reviewed before it is relied on.

Who we are and who this covers

Plainn is software sold to businesses to run their point of sale, stock and reporting. This policy covers two different relationships, and they work differently.

The first is data about the business itself and the people it employs — its user accounts, its devices, its account details. For that data, Plainn is the controller: we decide why it is collected and how it is used.

The second is data about the business's own customers — the people who buy from the business, not from Plainn. That data belongs to the business. Plainn only processes it on the business's instructions, as the tool the business has chosen to run its shop.

What we collect about you (the business)

For each person the business creates an account for, we hold their name, email, username and role.

We hold the business's name and details.

For each till the business registers, we hold a device name and a device identifier.

What your business stores about its customers

When a business keeps records on its own customers in Plainn, those records can include a name, phone number, email, address, free-text notes, tags, and totals derived from their orders — a loyalty points balance, total spent, order count and last order date.

Plainn does not use this data for anything except providing the service to the business that entered it. We never use it for our own marketing.

Payments

Subscription payments are processed by Paystack, who host the checkout. No card number and no CVV ever reaches Plainn's servers.

What we store against a subscription is a Paystack authorisation token, used to charge renewals, along with the card's last four digits, brand and expiry so the business can recognise which card is on file. That token can be revoked from within the app.

This website

Cloudflare Web Analytics is the only third-party script on this website. It sets no cookies and records page views and referrers, not individuals.

The Plainn mobile and desktop apps contain no analytics, crash-reporting or tracking software of any kind.

Where data is held

Plainn's servers are hosted outside Nigeria. Storing and processing data there is a cross-border transfer.

Keeping and deleting

A business's data is retained for as long as its account is active.

An archived customer's record is kept rather than erased, because their past orders reference it. If you want a customer's data deleted, contact us and we will handle the request.

Your rights and how to reach us

You can ask to access, correct or delete the data we hold about you. Write to us at [email protected].