About these terms
These Terms of Service govern your use of TillSync’s Android app, web dashboard, website, and related services. “TillSync”, “we”, and “us” refer to the provider of the TillSync service; our service and legal contact is hello@tillsync.co.ke. “You” includes the individual using the service and, where that person has authority to act for a business, that business.
By creating an account or using the service, you agree to these terms. If you act for a business, you confirm that you are authorised to do so. If you do not agree, do not create an account or continue using the service. Our Privacy Policy explains our data practices; accepting these terms is not a substitute for a separate consent required by law.
What TillSync provides
TillSync takes recognised M-Pesa payment-confirmation messages received on an authorised Android Till phone and makes payment details available to the business’s authorised members. Features include a payment feed, sales claims, permissions, device status, reports, and exports.
TillSync is not a bank, payment processor, payment-verification service, or custodian of funds. It does not initiate or settle M-Pesa transactions, hold balances, or issue refunds on behalf of M-Pesa. A record in TillSync indicates that a message was received and processed; it does not independently prove that money settled or that a message is authentic.
You must check your M-Pesa statement or other authoritative source when confirming settlement, investigating a reversal, or making a significant financial decision. A sales claim is a business record of who served a customer, not proof of payment or ownership of funds.
Eligibility and account security
You must be at least 18 years old, able to enter a binding agreement, and authorised to access the business and Till information you connect. Provide accurate account information and keep it reasonably current.
You are responsible for activity under your account that you authorise and for keeping your credentials and devices secure. Do not share passwords or sign in as someone else. Notify us promptly if you suspect unauthorised access. You are not automatically responsible for activity caused by our failure to meet a legal security obligation.
Keep control of the email or Google account used for sign-in. We may require proportionate identity verification before changing sensitive account details or fulfilling a deletion request.
Business owners and team access
A business owner must have authority to connect its Till phone and process the messages and customer information it receives. The business is responsible for providing appropriate notices to staff and customers and establishing a lawful basis for their data processing.
- Grant access only to people who need it for legitimate business duties, review permissions, and remove access when it is no longer appropriate.
- Understand that the original M-Pesa receipt may reveal the account balance. Grant original-message access deliberately.
- Protect the Till phone, keep it connected and charged, and configure required Android permissions and background activity.
- Check claims, correct mistakes, and use fair procedures when using sales information in staff decisions.
- Handle downloaded reports, customer details, and shared files securely. The app’s permissions cannot control a copy you export.
Team members may access and use records only for the business duties and permissions they have been given. Removing a member from a business is an access change; it is not permanent deletion of that person’s account or personal data.
Acceptable use
You must not use TillSync to:
- Monitor another person’s personal messages, connect a phone or account without authority, or carry out covert surveillance.
- Upload forged messages, misrepresent a payment, manipulate claims dishonestly, commit fraud, or facilitate unlawful transactions.
- Access another business’s data, bypass permissions, misuse sign-in credentials, or exploit a security vulnerability.
- Publish or sell customer or staff data without a lawful basis, send unwanted marketing using receipt information, or violate privacy or other rights.
- Interfere with the service, distribute malicious software, overload its systems, or attempt to defeat reasonable security controls.
- Copy or redistribute proprietary service software beyond a permission granted by these terms or applicable law.
If you discover a security issue, report it to hello@tillsync.co.ke without accessing more data than is necessary to demonstrate the issue. Nothing here prevents lawful research, reporting, or rights that cannot be excluded by contract.
Your data and our permission to process it
You and the relevant data subjects keep the rights you have in information submitted to the service. These terms do not transfer ownership of your business records or give us a right to sell personal data.
You authorise us to host, transmit, display, organise, and otherwise process information only as needed to provide the service, follow your lawful instructions, maintain security, and meet legal obligations, as explained in the Privacy Policy. This permission is subject to applicable data-protection rights and valid deletion requests.
You must have the rights and lawful authority needed for the information you submit. Do not use TillSync to store unrelated sensitive information. We may restrict or remove content when legally required or reasonably necessary to address misuse, with notice where appropriate and permitted.
Availability, accuracy, and dependencies
The service depends on the Till phone receiving a supported SMS, the phone’s settings and permissions, network connectivity, and third-party infrastructure. Delays, outages, unsupported message formats, reversed transactions, or device restrictions can result in missing or late records.
We do not promise uninterrupted delivery, a fixed delivery time, complete transaction history, or error-free totals. Device-health indicators can help identify an issue but do not guarantee that every payment has been recorded. Keep your own appropriate business records and check authoritative payment statements.
We may make reasonable changes or perform maintenance to maintain or improve the service. If a material change substantially reduces a service you have paid for, we will provide any notice or remedy required by the applicable agreement and law.
Charges and third-party services
Any applicable price, billing period, tax, renewal, or cancellation condition must be presented before you agree to a purchase. These terms alone do not authorise a charge or automatic renewal. Any additional purchase terms must be consistent with mandatory consumer rights.
You are responsible for mobile data, network, device, and M-Pesa charges imposed by the relevant provider. TillSync cannot cancel, reverse, or refund an M-Pesa payment.
Google sign-in, Firebase infrastructure, Android, hosting providers, and other third-party services operate under their own applicable terms. M-Pesa is a trademark of Safaricom PLC. TillSync is not affiliated with, endorsed by, or operated by Safaricom.
Software and intellectual property
We grant you a limited, non-exclusive permission to use TillSync for its intended business purpose while you comply with these terms. TillSync’s software, branding, and website materials remain protected by the rights of their respective owners. Third-party and open-source components remain subject to their own licences.
You may use exported business records for lawful business purposes. You may not imply that TillSync or Safaricom has verified an export, endorsed your business, or guaranteed the underlying payments.
Ending use, suspension, and deletion
You can stop using the service at any time and request account and associated personal-data deletion at Delete your TillSync account. Uninstalling, signing out, or pausing a device does not automatically remove cloud records.
Before closing a business, consider any lawful export or continuity arrangements needed for its other members. We will explain the consequences of an owner’s deletion request and address business access safely. A business handover must not be used to obstruct the personal deletion rights of an owner or staff member.
We may restrict or suspend access where reasonably necessary to address fraud, unauthorised access, material misuse, a serious security risk, or a legal requirement. Where practicable and lawful, we will explain the reason and give an opportunity to resolve it. A suspension does not replace a valid permanent-deletion request.
Retention and deletion periods, including the limits on backups and provider-side records, are set out in the Privacy Policy. Obligations relating to privacy, accrued rights, lawful record retention, intellectual property, and dispute resolution continue where their nature requires after use ends.
Responsibility and liability
To the extent permitted by applicable law, the service is provided as available without a guarantee that it will meet every business requirement. You remain responsible for checking payments, reviewing business decisions, and maintaining records appropriate to your needs.
To the extent the law permits, TillSync is not liable for indirect or consequential loss, including lost profits, lost opportunities, or business interruption, arising from use of or inability to use the service. Responsibility for direct loss is subject to the facts, these terms, and applicable law.
Nothing in these terms excludes liability for fraud, wilful misconduct, or any liability that the law does not allow to be excluded or limited. Nothing removes statutory consumer protections, data-protection rights, or a remedy that applicable law makes mandatory.
Governing law and disputes
These terms are governed by Kenyan law, subject to any mandatory protections that apply to you. If a dispute arises, contact hello@tillsync.co.ke with the relevant details so we can try to resolve it.
Unresolved disputes may be brought before a court with lawful jurisdiction in Kenya, subject to mandatory jurisdiction rules. This does not prevent you from contacting a regulator, exercising a statutory right, or seeking urgent legal relief. For data-protection complaints, you may contact Kenya’s Office of the Data Protection Commissioner.
Changes and contact
We may update these terms to reflect changes to the service or legal requirements and will show the revised date above. We will give appropriate notice of material changes. Changes do not retrospectively remove rights you already have; where express agreement is required, we will seek it.
If one provision is unenforceable, the remaining provisions continue to apply to the extent permitted by law. Failure to enforce a provision on one occasion does not waive it generally. A lawful transfer of the service must not reduce mandatory rights or data-protection obligations.
Questions about these terms or the service can be sent to TillSync at hello@tillsync.co.ke, or through Contact support.