Data we collect

The app sends us no data about you: no name, email, phone number, location, contacts, photos, files, advertising ID or usage history.

The app contains no advertising, tracking or analytics SDKs. We do not sell any data or share it for advertising.

What the app connects to

• Backblaze B2 cloud storage (backblazeb2.com) to download two files from your shop's folder only: the shop's encrypted report, and a signed service-activation file that is verified on the device.
• Each request includes the shop's read-key ID and folder path, used only for authorization. The app uploads nothing.
• Android only: the pairing code is scanned on the device with Google ML Kit, and camera images are never sent. The library may send Google diagnostic information about its own performance (device and app information, a per-installation identifier, performance metrics), processed under Google's policies. On iOS, scanning uses Apple's on-device framework.

The shop's report and third-party data

• The desktop program produces the report and encrypts it with AES-256-GCM before uploading it to a storage account we (the software vendor) operate, in a folder dedicated to the shop. It is decrypted only on the paired phone, with a key delivered in the pairing code.
• The hosting provider (Backblaze) does not have the decryption key. As the software vendor, we keep a copy of the key in the shop's setup file for technical support.
• The report may include the names, phone numbers and balances of the shop's customers and suppliers, and the names of its staff users. This data belongs to, and is the responsibility of, the shop owner. The app only displays it on the paired device.

Permissions

• Camera: only to scan the pairing code, requested when the scanner opens. Pasting the code as text works without it.
• Fingerprint / Face ID: only if you turn on the app lock. The operating system handles it; the app only receives success or failure.
• Internet: to download the report.

The app does not request location, contacts, microphone, photos or notifications.

Stored on your device

• Pairing keys and a salted hash of your PIN (never the PIN itself), in the system's secure storage (Keychain on iOS, Keystore on Android). They do not move to another device.
• The latest report copy, for offline viewing, in the app's cache folder, excluded from system backups.
• Theme preference, and the times of the last refresh and last service check.

"Unpair" in Settings erases the pairing keys, the report and the app lock immediately, and deleting the app removes them too. On iOS the system may keep the pairing keys hidden after deletion; the app erases them automatically the first time it is installed again.

Retention and deletion

• We keep no data about you from this app.
• Data on your device stays until you unpair or delete the app; the saved report is replaced on every refresh.
• The shop's report in cloud storage is managed by the desktop program. To delete your shop's data from it, email us at the address below.

Security

• All connections use HTTPS, and the report is encrypted before it leaves the shop computer.
• The read key in the pairing code is limited to the report folder: it cannot reach the shop's backups and cannot write anything.
• The pairing code is a secret: whoever has it can read the shop's report, so don't share its image or text. It can be revoked from the desktop program at any time.
• You can lock the app with a PIN or biometrics in Settings.

Children

The app is intended for shop owners and their staff, not for children, and collects no data about anyone.

Your choices

At any time you can unpair, delete the app, or deny the camera or biometric permission in the device settings. For any request about your shop's data in cloud storage, or questions about this policy, contact us.

Changes and contact

If this policy changes, its "last updated" date changes, and the new version appears in the app and on this page.

• Publisher: Jafer Jasim
• Email: [email protected]