Privacy Policy

1 Introduction

ScanSell POS is a point-of-sale, billing and stock app for small shops. It is published by Menda Naveen ("we", "us", "our"). This policy explains what information the app handles, where it is kept, who else is involved, and the choices you have.

We have written it in plain language. Where this policy says something is or is not done, it describes how the current version of the app actually works.

2 Scope of this policy

This policy applies to:

• the ScanSell POS mobile app (Android package com.scansellpos.app), including its optional ScanSell account; and
• this website, which contains our legal pages. It uses no cookies, analytics or tracking scripts.

It does not cover services run by other companies that you choose to use with the app, such as your Google account, your email app, a cloud drive where you save a backup, or a messaging app you use to share a receipt. Their own privacy policies apply.

Your customers' data. If you use ScanSell POS to record information about your customers, you decide what is recorded and why. For that information, you (the shop) are responsible as the "controller" under data-protection laws. Because that information stays on your device (see section 6), we do not receive it.

3 Summary

• Your shop data stays on your phoneProducts, sales, customers and stock are stored in the app on your device. The current version does not upload them.
• An account is optionalThe app works fully without one. If you sign in, we store your email address, name and an account ID with our cloud provider, Supabase.
• No ads, no trackingThe app contains no advertising or analytics SDKs and does not read your advertising ID.
• Barcode scanning by Google ML KitScanning happens on your device. Google's ML Kit library sends Google technical usage and diagnostics data.
• You can delete your accountIn the app, or by request from this website. See Delete Account.

4 Information we collect

Most of what you enter into ScanSell POS never reaches us. Below, "collect" means that information leaves your device and is received by us or by a service provider working for us.

5 Information you provide

• Shop details you enter during set-up and in Settings, such as the shop name, country, currency, address, tax or registration numbers, receipt header and footer, and logo. Stored on your device.
• Account details, if you choose to sign in: your email address and the name on your Google account. See section 9.
• Support requests: if you email us, we receive your email address and whatever you write, including attachments.
• Imports: if you import products from a file or from a Google Sheets link, the app reads that file or downloads that sheet onto your device. We do not receive it.

6 Business and transaction data

ScanSell POS stores the following in its private storage on your device:

• products, variants, barcodes, prices, price lists, tax settings, categories and product photos;
• stock levels, stock movements, stock receipts and stocktakes;
• suppliers;
• sales, refunds, receipts and invoice numbers, discounts, taxes and the payment method used for each sale, held and parked sales, and "pay later" balances;
• customers, if you add them: name, phone, email, address, tax ID, notes, credit limit and their store-credit history;
• cash movements and daily closing records;
• an audit log of important changes, and your app settings.

Payments. ScanSell POS is not a payment processor. It does not read, process or store card numbers or bank login details. It records how a sale was paid (for example cash, card or QR payment) as a note on the sale. If you set up QR Pay, the app shows your own payment QR image to your customer. The app never contacts a bank or wallet and cannot confirm that a payment arrived.

Purchases. This version of the app has no in-app purchases.

7 Device and technical information

• No advertising ID or analytics. The app does not read your advertising ID and contains no analytics or advertising software.
• Till identifier on the device. The app creates a random identifier for your phone, used for invoice numbering. It stays on your device.
• Account service requests. When you sign in, stay signed in or delete your account, the app connects to our account service at Supabase. Like any internet service, Supabase receives technical information with each request, such as your IP address, the time, and the app's request details. It records sign-in events in an authentication log for security.
• Crash reports. Settings has a "Send crash reports" switch, which is off by default. This version contains no crash-reporting service, so no crash reports are sent, even if the switch is on. If a future version adds one, we will name it here first.
• Barcode scanning diagnostics. See section 8 and section 13.

8 Camera, barcode scanning and other permissions

The app asks for each permission only when you use the feature that needs it. You can refuse or withdraw any permission in your phone's settings. The rest of the app keeps working.

• Camera: to scan barcodes and to take product photos. Camera images are processed on your device and are not uploaded by the app. Barcode recognition uses Google's ML Kit library, which runs on the device. As part of its normal operation, ML Kit sends Google technical data about its use: device and app information, performance metrics, error codes and a per-installation identifier. According to Google, this does not include your camera images.
• Photos: when you choose a product photo, the app receives only the photo you pick and stores a copy in its own storage.
• Bluetooth / Nearby devices: to connect to a receipt printer you have paired. The app does not use Bluetooth to work out your location.
• Notifications: for low-stock alerts, only if you turn them on. They are created on the device.
• Biometrics: if you turn on the optional app lock, Android checks your fingerprint or face. The app only learns whether the check succeeded. It never receives your biometric data.
• Internet: for the optional account, Google Sheets imports, and links you open (for example the store page, your email app or this website). Selling, stock and backups do not need the internet.

9 Your account and sign-in

An account is optional. You can sell, manage stock, print and back up without one. You can create an account in More › Account.

Sign in with Google

The app uses Android's standard Google account picker. When you choose an account, Google gives the app a sign-in token confirming your identity. It contains your email address, your name and profile picture link (if your Google account has them), and your Google account ID. The app passes this token to our account service at Supabase, which checks it and creates or opens your ScanSell account. We never see your Google password.

Sign in with an email code

Some versions of the app also let you sign in with a 6-digit code sent to your email address. No password is used. The code expires after 10 minutes. Sending the code means your email address is passed to the email delivery service our account service uses. If you sign in with Google and with an email code using the same verified address, both lead to the same account.

What your account stores

• a random account ID;
• your email address and the sign-in methods you have used;
• details from Google sign-in as described above, and a display name taken from it;
• when the account was created and when you last signed in.

Your sign-in session is kept on your phone in Android's secure storage. It is not saved in the app's database or in backups. Signing out ends the session on the phone. Your shop data on the phone is not affected.

10 Cloud storage and synchronisation

Our account service runs on Supabase, a cloud database and authentication provider. Account data is stored in Supabase's EU (Ireland) region.

Shop data is not uploaded in the current version. Signing in does not copy your products, sales, customers or settings to the cloud. The app shows "This phone's shop is not connected to your account yet" to make this clear.

Our cloud system is being prepared for a future feature that lets several phones in one shop share data ("sync"). That would store copies of your shop records in the cloud. It is not active. We will update this policy, and say so in the app, before any shop data is uploaded.

The cloud system is designed so that a shop's data can be seen only by signed-in members of that shop. Every table is protected by access rules in the database. The public key built into the app cannot read anything without signing in.

11 Storage on your device and offline use

ScanSell POS is built to work offline. Everything listed in section 6 is stored in the app's private storage on your phone, which other apps cannot read.

• Android's automatic cloud backup and device-to-device transfer are turned off for this app's data. Your shop data is not copied to your Google account by the phone.
• The shop database is protected by Android's app isolation but is not separately encrypted by the app. Protect your phone with a screen lock, and consider the app lock in More › Security.
• Receipts and exports you share are first placed in the app's temporary folder.

To erase everything the app stores on a phone, use More › Privacy & legal › Delete all data on this device, or uninstall the app.

12 Backup and restore

• You can create a backup file in More › Backup and restore. The app makes backups only when you ask.
• Backup files are encrypted with a password you choose (AES-256-GCM, with the key derived from your password using Argon2id). Without the password, the backup cannot be opened. We cannot recover a lost backup password.
• You choose where a backup is saved or shared, for example your phone's storage or a cloud drive of your choice. We never receive your backups. The service you save them to handles them under its own policy.
• Exports (for example product or sales spreadsheets, or one customer's data) and shared receipts are ordinary files. They are not encrypted and go only where you send them.
• Restoring a backup replaces the data in the app on that phone.

13 Third-party services and providers

The app contains no advertising, analytics or social-media tracking software.

14 How information is used

We use the information we receive only to:

• create, run and secure your account, and let you sign in and out;
• delete your account and its data when you ask;
• protect the service against abuse, for example limiting repeated sign-in attempts;
• answer your questions and support requests; and
• meet legal obligations.

We do not use your information for advertising, we do not build marketing profiles, and we do not sell it.

Legal bases (EU/UK). We process account data to provide the account you asked for (contract), and to keep the service secure (legitimate interests). Where the law requires it, we also process data to meet legal obligations.

15 Data sharing and disclosure

We do not sell or rent personal information, and we do not share it for advertising. We disclose information only:

• to the service providers in section 13, so they can provide their service to us;
• if required by law, a court order or a valid request from a public authority;
• to protect the rights, safety or property of our users, the public or us; or
• to a successor if the app is transferred to another publisher, in which case this policy continues to apply to your information.

Information you share yourself, for example a receipt sent through a messaging app or a backup saved to a cloud drive, goes where you send it and is handled by that service.

16 Data retention

• Data on your device stays until you delete it in the app, use Delete all data on this device, clear the app's storage or uninstall the app.
• Account data is kept while your account exists, and deleted when you delete your account (see section 18).
• Security and request logs kept by Supabase, including the authentication log (which can contain your email address and IP address), are not removed by account deletion. They are kept under Supabase's log retention and our own log housekeeping.
• Backups and exports you created are under your control. Delete them where you saved them.
• Support emails are kept in our support mailbox as a record of your request and our reply.

17 Data security

Measures that are in place today:

• The app connects to our account service only over encrypted HTTPS connections.
• Your sign-in session is kept in Android's secure storage, not in ordinary app files or backups.
• In the cloud database, access rules on every table decide what a signed-in person can read or change. The key built into the app gives no access without signing in.
• The privileged administrator key used to delete accounts exists only on the server. It is never inside the app or this website.
• Backup files are encrypted with your password (section 12).
• An optional app lock (PIN and biometrics) protects the app on a shared device. Deleting data, backups and exports ask for the owner PIN when the lock is on.

No system is completely secure. The shop database on your phone is not separately encrypted, so the security of your phone matters. Use a screen lock and keep your phone's software up to date.

19 Your rights and choices

Depending on where you live, data-protection laws give you rights over your personal information. These include the GDPR (EU), the UK GDPR, the CCPA/CPRA (California), Canada's PIPEDA, Australia's and New Zealand's Privacy Acts, and India's DPDP Act. They can include the right to:

• access the personal information we hold about you and get a copy;
• correct it;
• delete it, including by deleting your account;
• receive it in a portable format;
• object to or restrict certain processing; and
• complain to your data-protection authority.

To use these rights, contact us (see section 22). We may need to confirm that the request comes from the account holder before acting on it. We do not discriminate against you for using your rights.

Choices in the app: use the app without an account; sign out at any time; refuse or withdraw permissions; keep crash reports off; delete all data on the device.

Shop customers: if you are a customer of a shop that uses ScanSell POS, the shop holds your information on its own device, not us. Please contact the shop. The app gives shops tools to export or anonymise a customer's data.

20 Children's privacy

ScanSell POS is a business tool for shop owners and staff. It is not directed at children, and we do not knowingly create accounts for children. If you believe a child has created a ScanSell account, contact us and we will delete it.

21 Changes to this policy

We will update this policy when the app's handling of information changes, for example before shop sync or a crash-reporting service is switched on. The "Last updated" date at the top shows the current version. If a change significantly affects how your information is used, we will also tell you in the app before it takes effect.

22 Contact

Questions, requests or complaints about privacy:

Menda Naveen
Email: scansellpos@gmail.com