Privacy policy

The company that owns a kiosk creates the operator account. We keep the operator’s name, email address, role, and the kiosk they are assigned to. The till PIN is stored only as a one-way value that cannot be read back.

While a shift is open, the till records the work of that kiosk: cash in the drawer, float and commission on each line, customer numbers, transaction identifiers, amounts, notes, and the time of each entry. A count at the end of the day records the cash and float the operator says are on hand.

The phone keeps a sign-in for the operator so the shift can continue through the day. Signing out removes that sign-in from the phone.

The till asks for access to text messages so that receipts from MTN MoMo and Airtel Money can be posted into the open shift. From those receipts it uses the amount, the customer number, the transaction identifier, and the balance stated by the network.

Messages from any other sender are discarded. They are not saved, and they are not sent to the company.

If text-message access is not allowed, the till can instead read notifications posted by the MTN MoMo and Airtel Money applications, and only for the same fields. Notifications from every other application are ignored.

The records exist so the company can run the kiosk: open and close the day, see what was taken in and paid out, and reconcile cash, float, and commission. We do not use them for advertising, and we do not sell them.

Operators see the kiosk they are signed in to. Owners and staff of that company see the kiosks that belong to them. Intesa Digitale Ltd operates the service for those companies and can access records only as needed to provide the desk, to keep the service reliable, and to meet a legal duty.

A company remains responsible for the customer numbers and transaction details its operators enter. Those details are not shared with other companies on Intesa Flow.

Shift records stay with the company that owns the kiosk for as long as that company keeps its account, because the books of a day have to remain available for reconciliation. When a company closes its account, Intesa Digitale Ltd deletes or returns those records within a reasonable period, unless the law requires a copy to be kept.

The sign-in on a phone lasts until the operator signs out, the company releases that phone, or the sign-in expires.

Intesa Flow is a tool for kiosk businesses. It is not directed at children, and we do not knowingly create accounts for anyone under 18.

If this policy changes, the new version will be published on this page with a new date. Continued use of the till or the desk after that date means the new version applies.

Operators should speak first to the company that issued the till. Companies may write to Intesa Digitale Ltd, Kampala, Uganda.