Privacy Policy
Last updated: 9 April 2026 · South Africa (POPIA)
Who we are
ExpiryDesk (“we”, “us”) provides pharmacy stock expiry software. This policy explains how we collect, use, and protect personal information when you use expirydesk.co.za and related services.
What we collect
- Account data: email address, authentication identifiers (e.g. from Google when you choose that option), and optional profile metadata you provide.
- Operational data: medication lines you add (names, quantities, expiry dates, prices where entered), scan timestamps, and usage events needed to run the product (e.g. exports, reminders configuration).
- Billing data: processed by our payment provider (Stripe); we store subscription status and references needed to manage your plan, not full card numbers on our servers.
- Technical data: standard logs and diagnostics (e.g. errors, approximate region) to keep the service secure and reliable.
How we use information
We use personal information to provide the dashboard, process subscriptions, send service-related emails you request (such as digests), improve security, comply with law, and communicate about your account. We do not sell your personal information.
Storage and processors
Data is hosted with reputable cloud providers (including Supabase for authentication and database storage). We apply access controls and encryption in transit. Where data leaves South Africa as part of hosting, we take steps consistent with POPIA (including safeguards and transparency in this policy).
Your rights (POPIA)
Subject to law, you may request access to personal information we hold about you, ask us to correct it, object to certain processing, or ask us to delete or restrict processing where applicable. You may also lodge a complaint with the South African Information Regulator.
To exercise rights or ask questions, contact us using the details published on our website. We will respond within a reasonable time.
Retention
We keep information only as long as needed for the purposes above, including legal, tax, and dispute resolution requirements. Deleted inventory items may be retained in a recoverable state for a limited period before permanent removal.
Changes
We may update this policy from time to time. Material changes will be indicated by updating the date above.
See also Terms of Service.