Security and privacy
The people who serve customers need to know a payment arrived, and nothing more. This is what TillSync handles, who can see it, and how it is protected.
Who can see what
| Payment details and access | Attendants | Owner |
|---|---|---|
| Amount, M-Pesa code, time and payer’s name | Yes | Yes |
| Customer’s phone number, masked as M-Pesa masks it | Yes | Yes |
| Payments from the last 24 hours | Yes | Yes |
| Payments older than 24 hours | Only if you allow it | Yes |
| The original M-Pesa message, with your balance | Only if you allow it | Yes |
| Team, devices and settings | No | Yes |
| Sales by person, and assigning claims | No | Yes |
You can grant an individual attendant the original message or older payments. Everything else stays with you.
How it is protected
It is told about messages. It does not read your inbox.
TillSync asks Android for one thing: to be told when a new SMS arrives. It does not ask to read your inbox or your old messages, and it discards any message that is not from M-Pesa before looking at what it says.
Your balance is stored apart from the payment.
Each payment is saved as a short record: amount, code, time, payer name and masked number. The original message, with your balance, is saved separately and is readable only by people you allow.
Permissions are enforced on the server.
What each person can read is checked on the server for every request. Hiding a screen in the app is never the only protection.
Access ends when you say so.
Remove an attendant and they lose access at once. Only owners can add or remove people.
Sign in with Google or email.
Accounts use Google’s sign-in infrastructure (Firebase Authentication). TillSync never sees your Google password.
The numbers are message counts.
TillSync counts the M-Pesa confirmation messages your Till phone receives. It does not move or hold money, and it does not replace your M-Pesa statement, which stays the source of truth for large payments.
More in the FAQ.
For data collection, retention and your rights, read the Privacy Policy. You can also request account and data deletion.
Ready for a more connected counter?
Create your business, connect the Android phone that holds your Till SIM, and bring your team in.