Privacy Policy

Introduction

This Privacy Policy describes how SAF-T POS ("we", "us", "our") handles information when you use the SAF-T POS application on Windows, Android, or any other platform, or when you visit this website.

By using the app or this website, you agree to the practices described here. If you do not agree, please do not use the app.

For the purpose of applicable data protection laws, the "data controller" for your business data is you — the business owner whose Google account is tied to the workspace. SAF-T POS acts as a data processor on your behalf.

Information we collect

We collect only what is necessary to operate the app:

• Account information — the Google account you sign in with as the owner (name, email, unique user ID). Cashiers do not have Google accounts; they sign in with a username and password you create for them.
• Business data — the information you enter into the app: shop name, address, phone number, currency, branches, products, stock levels, prices, sales, expenses, suppliers, customers, and payment records.
• Cashier accounts — the names, usernames, phone numbers, commission rates, and hashed passwords you create for your staff.
• Device identifiers — a device-local, anonymous identifier used to authorize cashier sign-ins on that device. It is not a persistent tracking identifier and does not travel between apps.
• Diagnostic logs — sync success/failure events, error messages, and timestamps, retained only to debug sync problems.

We do not collect: your location history, your contacts, your photos, your microphone, your camera feeds, or anything unrelated to running your business.

How we use information

We use the information you provide solely to operate SAF-T POS:

• To let you sign in as the owner or as a cashier.
• To ring up sales, print receipts, and produce reports.
• To synchronize your business data across your devices.
• To produce PDF and Excel exports on request.
• To notify you (the owner) when a cashier records a sale.
• To enforce subscription status and prevent unauthorized use.
• To fix bugs and improve reliability using aggregated, non-identifying diagnostics.

We never use your business data for marketing, profiling, advertising, or resale.

Where your data is stored

Your business data lives in two places:

• Locally on each device — in an encrypted Isar database that only SAF-T POS can read. This is what lets the app run fully offline.
• In the cloud — in a Google Firebase Firestore database, under a private tree keyed to your Google account's unique user ID. No other business can read or write to that tree.

Synchronization happens automatically when your device has an internet connection. Without a connection, the app continues to work entirely offline and syncs the backlog the next time it comes online.

Who can see your data

• You (the owner) — can see everything in your business: all branches, all sales, all staff, all products, all reports.
• Your cashiers and staff — see only their own assigned branch and their own sales. They cannot see other branches, other cashiers' performance, or your business-wide reports.
• Your customers — see only the receipt you give them, and (if you enable QR self-ordering) the menu you have published. They cannot see your sales, stock, or staff data.
• SAF-T POS developers — do not have access to your business account or your records, unless you explicitly share your credentials with us for support and later revoke them.
• Google — operates the Firebase infrastructure that stores your data. Their handling of that data is governed by Google's own terms, not ours.

How we protect it

• Cashier passwords are hashed with PBKDF2-SHA256 (100,000 iterations, 16-byte random salt, 32-byte derived key). We cannot recover them — only reset them.
• All traffic to Firestore is HTTPS, encrypted in transit.
• Local databases use an encrypted file format that requires the app to read.
• Firestore access is restricted by security rules — only the owner UID and their authorized cashier devices can write. Reads are similarly restricted.
• Owner sessions use Google Sign-In — we never store your Google password.
• Cashier sessions use Firebase anonymous auth with a per-device access mapping, verified by the server before each session.

No system is 100% secure. If you discover a security concern, please report it to us at the address below before disclosing it publicly.

Sharing your data

We do not sell, rent, or share your business data with third parties for any commercial purpose.

Data leaves your device only in these limited situations:

• Sync to Google Firebase (our cloud provider) under your own account's tree.
• Sending a WhatsApp receipt to a customer — only when you or your cashier explicitly taps "Send".
• Sending a PDF or Excel export via email, file share, or the operating system's share sheet — only when you explicitly trigger the export.
• Push notifications delivered via Firebase Cloud Messaging — only to your own owner devices.
• Complying with a valid legal request from a competent authority, where required by applicable law.

Data retention & deletion

You control your data:

• You can delete any product, sale, expense, customer, supplier, cashier, or branch from within the app at any time.
• Deleting a record removes it from your device immediately, and from your Firestore tree on the next sync.
• Deleting your Google account, or asking us to purge your Firestore data, permanently removes everything on our side.
• Local exports (CSV, PDF, Excel, sticker sheets) that you saved to your device's file system are outside our control — you'll need to delete those files yourself.

If you want all your cloud data permanently erased, email us at agabaolivier85@gmail.com with the subject "Delete my account" and we will action it within 30 days.

Your rights

Depending on where you live, you may have the following rights over your data:

• Access — request a copy of the personal data we hold about you.
• Correction — fix inaccurate data through the app, or ask us to correct anything you can't.
• Deletion — request deletion of your account and all associated data.
• Portability — export your data as CSV, Excel, or PDF at any time.
• Objection — object to how we process your data (though our processing is strictly what's needed to run the app).
• Complaint — lodge a complaint with your local data protection authority if you believe we have mishandled your data.

To exercise any of these, email agabaolivier85@gmail.com.

Children's privacy

SAF-T POS is a business tool intended for users aged 18 or older. We do not knowingly collect data from children. If you believe a child has used the app, please contact us and we will delete the associated account.

Third-party services

SAF-T POS is built on top of these providers. Each has its own privacy and security practices:

• Google Firebase (Firestore, Authentication, Cloud Messaging) — cloud storage, sign-in, and push notifications.
• Google Sign-In — owner authentication.
• OpenStreetMap — map tiles shown when setting a branch geofence.
• WhatsApp — customer receipts and reminders, sent only when you explicitly trigger them.
• Microsoft Store — Windows distribution and updates.

We recommend reviewing each provider's privacy policy if you have specific concerns.

Changes & contact

We may update this policy from time to time. Material changes will be announced in the app, and the "Last updated" date at the top of this page will change. Continued use of SAF-T POS after an update means you accept the revised policy.

For any questions, requests, or complaints, contact us at:

SAF-T POS
Email: agabaolivier85@gmail.com
Response time: usually within 24 hours