Privacy Policy

Applies to the SmartPOS Android app (com.mikao.smartpos) and this website.

Who is responsible

SmartPOS is built and operated by an independent developer (Mikao apps). For privacy questions, contact support@smartpos.space.

If you use SmartPOS to run a shop, you are the one deciding what customer information you record. For that information you are the data controller and SmartPOS is the tool you use; you are responsible for handling your customers' details lawfully.

What stays on your phone

By default everything is stored locally in an app database only SmartPOS can read: products, prices, cost prices, stock, sales, invoices, customers and suppliers, credit and payments, expenses, staff records and your settings. If you never enable a cloud feature, this information never leaves the device, and uninstalling the app removes it.

What is sent to our servers, and only if you enable it

Cloud sync and staff access

If you turn on cloud sync or invite staff, your shop's records are copied to our database (hosted by Supabase) so your other devices can read them. This can include products, stock, sales, customers, expenses and staff records — the same data you already keep in the app.

Sign-in is anonymous. We do not ask for an email address or password. Your device is issued an anonymous identity so the server can tell your shop's devices apart. On first sign-in we use Cloudflare Turnstile, a bot check, to stop automated abuse of the free tier.

Access is restricted per shop: a device can only read data for a shop it is an approved member of.

Your public product page

If you enable your product page, the following becomes publicly visible to anyone with the link: your shop name, your phone number if you entered one, and your product names, categories, units and selling prices. Cost prices, profit, stock quantities, suppliers, staff, customers and your sales records are never published. Turning the page off stops it being served.

Orders placed by customers

When a customer places an order, the name, contact details and any address they enter are stored with that order so you can fulfil it. That information belongs to your shop and is deleted when you delete your shop data.

Google Drive backup

Backup is optional and goes to your own Google Drive, in a private app folder, not to us. We never receive your backup and cannot read it. You grant access with your Google account and can revoke it at any time in your Google account settings. Staff do not get access to the owner's Google account or backups.

Advertising

The free version shows ads from Google AdMob. Google may use a device advertising identifier and ad interaction data to select and measure ads, under Google's privacy policy. You can limit this in Android's settings for ads. Your shop's business records are never shared with advertisers. Subscribing removes ads.

You can also choose to watch a rewarded video to earn credits that unlock cloud features temporarily. Watching is always optional.

Purchases

Subscriptions are handled by Google Play Billing. Google processes the payment; we never see or store your card or bank details. We receive only the fact that a subscription is active.

Analytics and crash reporting

SmartPOS uses two Google Firebase services to keep the app working properly:

• Crashlytics records a technical report when the app crashes — the type of error, where it happened in the code, and basic device information such as model and Android version. This is what lets us find and fix faults.
• Analytics records which parts of the app get used, along with basic device and country information, so we know which features are worth improving.

These reports do not contain your shop's records. Product names, prices, sales, customers, invoices, staff details and backup contents are never sent to Firebase. Google processes this data under Firebase's privacy terms.

Google also provides aggregate installation and crash statistics through Play Console, from which we cannot identify individual users.

Device permissions

• Camera — barcode scanning. Frames are processed on the device and never uploaded or stored.
• Bluetooth — connecting to a receipt printer.
• Notifications — low-stock reminders you switch on yourself.
• Internet and network state — cloud features, ads and update checks.

SmartPOS does not request location access and does not track your location.

Children

SmartPOS is a business tool and is not directed at children under 13. We do not knowingly collect data from children.

How long we keep things

Local data stays until you delete it or uninstall. Cloud data stays until you delete your shop or leave it. Anonymous accounts that no longer belong to any shop are removed automatically after a period of inactivity.

Deleting your data

You can delete everything from inside the app, without contacting us:

• Owners: Settings → Delete cloud data permanently deletes your shop from our servers, with an option to erase the phone's copy at the same time.
• Staff: Settings → Leave this shop removes your device and membership. Sales you recorded remain with the shop, as those are the shop's business records.

Both also delete your anonymous account once it belongs to no shop. Deletion is permanent. See Support for details, or write to support@smartpos.space if you cannot open the app.

Your rights

Depending on where you live you may have rights to access, correct, export or erase your data. Most of these you can exercise directly in the app: your records are on your device, can be exported to CSV or PDF, and can be deleted as described above. For anything else, contact us.

Service providers

We rely on a small number of providers to run the parts of SmartPOS that are online: Supabase (database and anonymous authentication), Cloudflare (this website, the public shop pages and bot protection), Google Play (distribution, billing and update delivery), Google AdMob (advertising), Google Firebase (crash reporting and usage analytics) and Google Drive (only when you choose to back up). Each processes data under its own terms.

This website

This site does not use advertising or analytics cookies and does not set tracking cookies. Cloudflare processes requests to serve and protect the site.

Changes

If this policy changes materially we will update this page and note it in the app. Continuing to use SmartPOS after a change means you accept the updated policy.