Privacy policy

The short version

• Your products, sales, customers and stock are stored on your phone.
• They only leave your phone if you turn on backup or multi-device sync.
• We use Google Analytics for Firebase to see which features are used (never your shop data). We don’t show ads, sell data or track you across other apps.
• If you allow notifications, we can send you shop updates. You can turn them off at any time.
• You can delete your account at any time, in the app or by email.

Information we collect

Your account

Signing in is optional. If you sign in (with email, Google or Apple), we receive your email address and, if you share it, your name. Email passwords are stored only as a secure hash by our sign-in provider — we never see them.

Your shop data

Products, prices, sales, receipts, stock, customers (names, phone numbers, amounts owed) and settings are saved on your device. We can’t see them unless you turn on one of the features below.

Purchases

Khazana Pro and add-ons are paid through Google Play or the App Store — we never receive your card or payment details. We receive a record of what you bought (product, date, status) through our purchase provider RevenueCat, linked to your account so your purchases work on your other devices.

Optional features that send data

• Backup. Backups go to your own iCloud (iPhone) or Google Drive (Android) account, in a private app folder only Khazana can open, or to a file you choose where to save. You can protect a backup with a password; it is then encrypted on your phone before it’s saved.
• Multi-device sync (Pro). When you turn it on, your shop data is stored on secure cloud servers run by our provider Supabase so it can stay in step across your phones. Each account can only access its own data.
• Store Connect. If you connect an online store (WooCommerce, Shopify) or import from Amazon or Google Sheets, the app talks to those services directly from your phone. Store keys you enter are kept in your phone’s secure storage.
• App analytics. We use Google Analytics for Firebase to understand how the app is used: which screens are opened, when a sale is completed or a product is added, sign-ins and purchases (plan and price). It also records basic device information (model, OS version, app version), an app-instance ID and an approximate location (country or city) derived from your IP address. If you are signed in, these events are linked to your account ID. Analytics never receives your product names, customers, phone numbers or sale details, and isn’t used for advertising or to track you across other apps.
• Notifications. If you sign in and allow notifications, a notification token for your phone is saved with your account so we can send you shop updates. It is removed when you sign out or delete your account. You can turn notifications off at any time in your phone’s settings.

Phone permissions

• Camera — to scan barcodes and take product photos. Scanning happens on your phone; images aren’t sent to us.
• Photos — to add product pictures and a shop logo you pick.
• Bluetooth / local network — to find and use your receipt printer and barcode scanner. It isn’t used to find your location.
• Notifications — to send you shop updates if you allow it. You can turn this off in your phone’s settings.

Who we share data with

We don’t sell or rent your data. We use a small number of providers only to run the features above:

• Supabase — sign-in and multi-device sync.
• RevenueCat — keeping track of your purchases.
• Google Firebase — app analytics, and delivering notifications on Android.
• Expo — sending notifications to your phone (through Apple and Google).
• Google Play / Apple App Store — payments, and Google or Apple sign-in if you choose it.
• Apple iCloud / Google Drive — your backups, in your own account.

We may disclose information if required by law.

Security

Data sent between the app and our providers is encrypted in transit (HTTPS). Synced data is protected so that each account can only read and change its own records.

Keeping and deleting your data

We keep your account, synced data and notification tokens until you delete your account. When you do, they are permanently deleted. Analytics events are kept by Google for up to 14 months and then deleted automatically. Data saved on your phone stays there until you uninstall the app or clear its data, and backups stay in your iCloud or Google Drive until you remove them.

See how to delete your account.

Children

Khazana is a business tool and isn’t meant for children under 13. We don’t knowingly collect their data.

Changes

If we change this policy, we’ll update the date at the top of this page and, for important changes, tell you in the app.

Contact

Questions or requests about your data: support@khazanapos.com