Privacy Policy

Last updated 31 October 2026. Applies to the Saleva Android app (com.mikao.smartpos) and this website.

Who is responsible

Saleva is built and operated by an independent developer (Mikao apps). For privacy questions, contact hclodhran1@gmail.com.

If you use Saleva to run a shop, you are the one deciding what customer information you record. For that information you are the data controller and Saleva is the tool you use; you are responsible for handling your customers' details lawfully.

What stays on your phone

By default everything is stored locally in an app database only Saleva can read: products, prices, cost prices, stock, sales, invoices, customers and suppliers, credit and payments, expenses, staff records and your settings. If you never enable a cloud feature, this information never leaves the device, and uninstalling the app removes it.

What is sent to our servers, and only if you enable it

Cloud sync and staff access

If you turn on cloud sync or invite staff, your shop's records are copied to our database (hosted by Supabase) so your other devices can read them. This can include products, stock, sales, customers, expenses and staff records — the same data you already keep in the app.

Sign-in is anonymous. We do not ask for an email address or password. Your device is issued an anonymous identity so the server can tell your shop's devices apart. On first sign-in we use Cloudflare Turnstile, a bot check, to stop automated abuse of the free tier.

Access is restricted per shop: a device can only read data for a shop it is an approved member of. Your shop's figures are also shown on any computer that you link from the app (Saleva Web), and that link can be removed from the app at any time.

So that shops keep working when the main database is unavailable, we keep standby copies of synced shop data, an archive of history older than six months, and daily backups that are kept for 30 days. They are used only to serve your own shop back to you.

Your public product page

If you enable your product page, the following becomes publicly visible to anyone with the link: your shop name, your phone number and address if you entered them, your logo and shop photos if you added them, your delivery terms and offers, and your product names, photos, categories, units and selling prices. Cost prices, profit, stock quantities, suppliers, staff, customers and your sales records are never published. Turning the page off stops it being served.

Orders placed by customers

When a customer places an order, the name, contact details and any address they enter are stored with that order so you can fulfil it. That information belongs to your shop and is deleted when you delete your shop data.

Messages, reviews and return requests

Customers can message a shop, leave a rating and a review, and ask to return an order. The text, any photo attached and the time are stored on our servers so that both sides can read them. A photo sent in a chat is removed from our servers once the other side has received it.

Deliveries and rider location

When a rider taps Share my location on a delivery that is on its way, the phone's precise location is sent to our servers so that the customer can follow that delivery. Sharing shows a notification the whole time, covers only that delivery, and stops when the rider stops it or marks the order delivered. The positions are deleted when the delivery ends.

Weather on the home screen

If you allow it, Saleva uses your approximate location to show the weather beside the clock. The position is rounded and sent to our server, which asks OpenWeatherMap for the weather in that area. We do not keep a history of where you were. You can refuse, or switch the weather off in Settings.

Services near you

The Services screen finds people who offer a trade near you. To search, it uses your location if you allow it, or a city you type instead. If you list your own service, the name, phone number, trade, city and area you enter are shown to people who search. An exact address or position, if you add one, is used to work out distance and is not shown.

Writing help and Ask Saleva

When you ask Saleva to write something for you, such as a product description, a promotion or a reply, the text of the request is sent to our server and answered by an AI model run by Cloudflare. Only what the task needs is sent: for example a product name and category, the message you are replying to, or the totals you asked it to explain. Customer lists and contact details are not sent. An answer may be kept for up to 24 hours so that the same request does not have to be worked out twice. AI answers can be wrong; treat them as drafts to check.

Saleva Hub and shop competitions

The Hub is a community space. Posts and replies you write there, and your scores in its games, are stored on our servers and can be seen by other Hub users. Joining the Hub uses the same bot check as sign-in. If you join a shop competition, the figures it compares, such as the number of invoices and customers in a week, are shown to the other shops in that league. Both are optional.

Notifications about orders and messages

So that we can tell you about a new order, a message or a delivery, your phone registers with Google's Firebase Cloud Messaging and we store the token it gives us with your shop. You can turn notifications off in Android's settings at any time.

News from Saleva

You can choose to give us an email address to receive news about Saleva. This is optional and has nothing to do with signing in. We store the address and the fact that you agreed, and every message carries a link to unsubscribe.

Contacting support

If you write to us from the app, we store your message and our reply so that the conversation can continue. Technical details that help us find a fault, such as the app version and recent sync errors, may be stored with it.

Backups

Saleva makes an automatic backup every day, switched on from the start, and keeps it as a file on your phone. You can switch it off in the app.

Once you connect your own Google Drive, the daily backup is also copied there, to a private app folder, not to us. We never receive your backups and cannot read them. You grant Drive access with your Google account and can revoke it at any time in your Google account settings. Staff do not get access to the owner's Google account or backups.

Android's own device backup may save only the newest Saleva backup file, so a new phone can start from it. It never includes the app's live database, its settings, PINs or sign-in details. Saleva lets Android copy that file to the cloud only when Android encrypts it end to end, which needs a screen lock on the phone. You can turn Android backup off in your phone's settings.

Advertising

The free version shows ads from Google AdMob. Google may use a device advertising identifier and ad interaction data to select and measure ads, under Google's privacy policy. You can limit this in Android's settings for ads. Your shop's business records are never shared with advertisers. Subscribing removes ads.

Google's advertising software also receives your device's IP address, which can indicate your general area, how you interact with ads, and diagnostic information about the app. Where the law requires it, Saleva asks for your consent before personalised ads are shown, and you can change that choice in Settings under Privacy options.

You can also choose to watch a rewarded video to earn credits that unlock cloud features temporarily. Watching is always optional.

Purchases

Subscriptions are handled by Google Play Billing. Google processes the payment; we never see or store your card or bank details. We receive only the fact that a subscription is active.

Analytics and crash reporting

Saleva uses two Google Firebase services to keep the app working properly:

• Crashlytics records a technical report when the app crashes or stops responding, and when an error the app recovered from happens during a sale, a sync or a backup — the type of error, where it happened in the code, and basic device information such as model and Android version. The text of a recovered error is removed before it is sent, because it could contain a name. This is what lets us find and fix faults.
• Analytics records which parts of the app get used, along with basic device and country information, so we know which features are worth improving. It also records a few first-week steps, such as finishing setup, adding a first product, a first sale, a first udhaar or payment, a backup, opening the plans page, and how many days after installing the app was opened. These steps carry only counts, yes/no flags and fixed words such as “cash”: never an amount, a name, a phone number or a product.

These reports do not contain your shop's records. Product names, prices, sales, customers, invoices, staff details and backup contents are never sent to Firebase. Google processes this data under Firebase's privacy terms.

Google also provides aggregate installation and crash statistics through Play Console, from which we cannot identify individual users.

Device permissions

• Camera — scanning barcodes, taking product and shop photos, and photographing a page of a paper khata. Scanning and reading happen on the device. A photo is uploaded only when it is part of your online shop or a chat message.
• Microphone — voice commands. Your phone's own speech service turns what you say into text; Saleva does not record or store audio.
• Location — sharing a delivery, the weather on the home screen and services near you, each only if you allow it, as described above.
• Bluetooth — connecting to a receipt printer.
• Notifications — low-stock reminders, new orders, messages and deliveries.
• Fingerprint or face unlock — unlocking the app. Android only tells Saleva whether the check passed; Saleva never sees your fingerprint or face.
• Internet and network state — cloud features, ads and update checks.

Saleva asks for each of these at the moment you first use the feature, and works without any of them. It does not read your location in the background, and it does not pass your device's location to advertisers.

Children

Saleva is a business tool and is not directed at children under 13. We do not knowingly collect data from children.

How long we keep things

Local data stays until you delete it or uninstall. Cloud data stays until you delete your shop or leave it. Anonymous accounts that no longer belong to any shop are removed automatically after a period of inactivity.

Your online shop page is kept online by credits or a subscription. If that lapses, the app warns you and the page pauses; seven days later the published copy of your catalogue — products, offers and photos — is removed from our servers unless you renew. Orders, business records and everything on your phone are not affected.

Deleting your data

You can delete everything from inside the app, without contacting us:

• Owners: Settings → Delete cloud data permanently deletes your shop from our servers, with an option to erase the phone's copy at the same time.
• Staff: Settings → Leave this shop removes your device and membership. Sales you recorded remain with the shop, as those are the shop's business records.

Both also delete your anonymous account once it belongs to no shop. Deletion is permanent. See Support for details, or write to hclodhran1@gmail.com if you cannot open the app.

Deletion takes effect in our main database at once, and our standby copies and archive follow within the hour. Backups are kept for 30 days and then deleted; a backup is never used to bring a deleted shop back.

Your rights

Depending on where you live you may have rights to access, correct, export or erase your data. Most of these you can exercise directly in the app: your records are on your device, can be exported to CSV or PDF, and can be deleted as described above. For anything else, contact us.

Reporting a shop

Anyone can report a shop from its page or in the app. We store the reason you choose, anything you type in the details box, and the time. We do not store your name, account or IP address with a report. The shop does not see who reported it. Reports are reviewed by the Saleva team and kept as a record of how they were handled.

Service providers

We rely on these providers to run the parts of Saleva that are online: Supabase (main database and anonymous authentication); Cloudflare (this website, the public shop pages, photo storage, bot protection, standby copies and backups of shop data, and the AI model behind writing help); Turso (archive of older shop history); Neon (a standby copy of public shop pages); Upstash (short-lived caching and rate limiting); MongoDB (technical and support logs); OpenWeatherMap (weather); Google Play (distribution, billing and update delivery); Google AdMob (advertising); Google Firebase (crash reporting, usage analytics, notifications and live order tracking) Google Drive (only after you connect it for backups) and Android's device backup (the newest backup file, encrypted end to end). Each processes data under its own terms.

This website

Fonts are served from this site. Cloudflare processes requests to serve and protect the site. The Saleva team’s own admin area sets one strictly necessary sign-in cookie.

Advertising on this website

Most pages on this site carry advertising from Google AdSense: the home page, the blog, the guides, the free tools, About, Contact and Support. The legal pages (this page and the terms) carry no advertising. The free tools work entirely in your browser: what you type into them is not sent to us, and the invoice maker keeps your shop details only in your own browser, with a button to forget them. A shop’s public product page, a customer’s account page and the download page carry no advertising.

Where ads are shown, Google and its partners may set or read cookies and similar identifiers on your device to serve and measure those ads, and, if you agree to it, to personalise them. What Google does with that data is described in How Google uses information from sites that use our services.

None of your shop’s business records are involved. Advertising on this website has no access to the app’s data, and a shop’s products, sales, customers or dues are never shared with advertisers.

Your consent, and how to change it

If you are in the European Economic Area, the United Kingdom or Switzerland, a consent message appears before personalised advertising cookies are used. You can consent, refuse, or open Manage options to choose purposes and vendors individually. Refusing is a single click, and if you refuse you will still see the page and may still see non-personalised ads.

You can change your mind at any time using the Privacy & cookie choices link at the foot of any page that carries advertising. That link clears the consent we hold for you and asks again. You can also clear cookies in your browser, which has the same effect.

We use Google’s certified consent management platform for this. We do not sell personal data, and we do not use advertising cookies for anything other than the advertising described above.

Counting visits

The pages that carry advertising also use Google Analytics, so that we can see how many people read each page and how they found it. It records the page, the time, the kind of device and browser and the country, under a random identifier kept in a cookie. In the European Economic Area, the United Kingdom and Switzerland that cookie is not set unless you agree in the consent message. Cloudflare also counts visits for us without cookies. Neither receives the business records of your shop.

Changes

If this policy changes materially we will update this page and note it in the app. Continuing to use Saleva after a change means you accept the updated policy.