Privacy Policy

1.1 Information You Provide Directly

• Business details — business name, phone number, and address. These appear on receipts and in the app header.
• Administrator profile — your display name and a PIN. Your PIN is never stored in plaintext; it is hashed using SHA-256 with a unique salt before being saved.
• Staff profiles — names, roles, and hashed PINs for any additional staff you add.
• Customer records — customer name, phone number, email, and notes that you choose to record.
• Product catalog — product names, prices, barcodes, images, and stock levels.
• Sales transactions — items sold, quantities, prices, discounts, taxes, payment methods, and any associated customer.
• Credit records — outstanding balances and payment history for credit sales.

1.2 Information Generated Automatically

• Device identifier — a randomly generated UUID created on the first sync activation. Used solely to distinguish your device from other paired devices. It is not linked to your personal identity.
• Anonymous installation activity — when anonymous usage statistics are enabled, the app sends a separate random installation identifier, the Retail or Restaurant app variant, platform, app version, and an activity timestamp at most once per day when online. The server stores only a SHA-256 hash of the identifier. No business, staff, customer, product, or sales data is included. You can disable this in App Settings.
• Pairing code — a 10-character alphanumeric code that identifies your business across paired devices.
• App preferences — theme, display language, printer settings, and sound/haptic feedback preferences, stored locally in device preferences.

1.3 Information We Do Not Collect

When sync is enabled, the following data is transmitted to our servers hosted at shoptech.ng:

• Business profile (name, phone, address, logo)
• Staff display names and hashed PINs
• Customer records (name, phone, email, notes)
• Product catalog (names, prices, images, stock)
• Sales transactions and line items
• Credit and payment records
• Payment method configurations
• Deletion events (so removals propagate across devices)

Pairing authentication: Devices are authenticated by a business-level pairing code, not individual user credentials. If you regenerate your pairing code, all previously paired devices are automatically signed out.

Disabling sync: You can disable sync at any time from Settings. After disabling, new data is no longer transmitted. Data already on our servers is retained until you request deletion (see Section 6).

Camera frames used for barcode scanning are processed on-device and are never stored or transmitted. We use only the permissions necessary for the stated feature.

• Images are stored locally in the app's private storage directory.
• If cloud sync is enabled, images are compressed (max 2048 × 2048 px, max 2 MB) and uploaded to our servers.
• Images are referenced by an anonymous asset key and are not publicly accessible.

Local data: All data on your device is under your control. You can delete individual records (customers, products, sales) from within the app, or uninstall the app to remove all local data.

Server data (sync users only): Cloud data is retained while your subscription is active and for 90 days after it expires, allowing time to renew or request deletion. If you do not renew, your cloud business account, synced records, and uploaded assets are automatically deleted after that period. During the retention period, business managers can use Delete Account in the app; the account is disabled immediately and permanently purged after a 3-day recovery period. You can also email [email protected] with your business name and pairing code, and we will complete a verified deletion request within 30 days.

Support feedback: Messages submitted through the in-app feedback form are retained for up to 12 months and then deleted.

Anonymous usage statistics: Active installation records are retained while the feature is enabled. Records not seen for 400 days are deleted. Turning the setting off sends a deletion request immediately; if the device is offline, the app retries when it next connects.

Subscription management is handled entirely by Apple App Store (iOS) or Google Play (Android). We receive a purchase token from the platform, which our server verifies to activate your subscription. We do not receive or store your payment card details.

Apple privacy: apple.com/legal/privacy
Google privacy: policies.google.com/privacy

PrimePOS is a business management tool intended for adults operating businesses. We do not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction). If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this document. For significant changes, we will notify you within the app. Continued use of PrimePOS after changes are posted constitutes acceptance of the revised policy.