Privacy Policy

Effective Date: January 1, 2026

Last Updated: November 2026

1. Introduction

This Privacy Policy explains how DigiShop collects, stores, uses, and safeguards information when you use our mobile application and related cloud backup services. By using DigiShop, you consent to the practices described in this policy.

2. Information We Collect

A. Account Information

When you sign in using Google Sign-In, we collect your name, email address, and profile photo URL provided by Google via Firebase Authentication. If you use the app in Guest Mode, no account information is collected.

B. Shop & Merchant Profile

You may optionally provide store details such as your shop name (in English and Urdu), store contact phone number, physical address, and optional payment receiver details (such as your EasyPaisa, JazzCash, or bank account identifier for customer billing displays).

C. Inventory & Transaction Records

To provide core POS register capabilities, the app stores:

• Product inventory (product names, barcodes, purchase cost, retail selling prices, stock quantities, and product photos created and managed by you).
• Sales receipts and transaction histories.

D. Customer Khata (Credit Ledger) & Phone Numbers

When you use the Udhaar / Khata (customer credit ledger) features, you may enter third-party personal information about your own customers, including:

• Customer name (and optional Urdu name)
• Customer mobile / WhatsApp phone number
• Optional address
• Credit (udhaar) balances, payment (vasooli) history, and related notes

Important:

• This customer information is entered by you (the shopkeeper) for your own bookkeeping, reminders, and collections. We do not scrape or buy customer contacts.
• Phone numbers may be used inside the app only to help you call the customer or open a WhatsApp reminder using your customizable reminder template that you choose to send. No background automated messaging or spam is performed.
• We do not sell, rent, advertise with, or share customer Khata phone numbers with third parties for marketing.
• If cloud sync / backup is enabled, this ledger data (including phone numbers you entered) is stored under your merchant account in Firebase and/or in your personal Google Drive backup, solely so you can restore your shop records.
• You are responsible for entering accurate customer details and for complying with any local rules about how you store or contact your customers.

E. Device & Storage Permissions

• Camera & Photo Gallery: Used when you scan product barcodes into invoices or inventory, and when taking or selecting product photos and shop logos. Barcode scanning is processed entirely in real-time on your device; images or video frames from barcode scanning are never stored or uploaded to any server.
• Internet & Network State: Used to check network connectivity and synchronize data to Google Firebase or Google Drive when enabled.

3. How We Use Your Information

We use the collected information solely to:

• Provide local and offline point-of-sale billing and inventory calculations.
• Maintain your customer credit (Udhaar Khata) balances, phone-based reminders you initiate, and printable receipt vouchers.
• Sync your store records securely to Google Firebase Cloud Firestore so you never lose your data across devices.
• Back up database snapshots and product images to your personal Google Drive (when authorized by you).

We do not use customer Khata phone numbers for advertising, analytics profiles, or resale.

4. Third-Party Services & Cloud Infrastructure

DigiShop integrates with trusted service providers to deliver cloud backup services:

• Google Firebase (Authentication, Cloud Firestore): Used for secure user authentication and cloud synchronization. All data transferred between the app and Firebase is encrypted in transit using industry-standard TLS/HTTPS.
• Google Drive API: If you connect Google Drive, data and image backups are stored in your private Google Drive account. We do not expose your Google Drive files to the public.
• WhatsApp / Phone dialer (device apps): If you tap Call or WhatsApp Reminder, the app opens your device's phone or WhatsApp app with the number/message you already stored. Message delivery is controlled by you and those apps—not by us.

5. Data Security

We apply robust security safeguards to protect your business records:

• All cloud communications utilize HTTPS with TLS 1.2+ encryption.
• Firestore security rules enforce strict tenant isolation: each merchant can only read and write data belonging to their verified Firebase User ID (shops/{userId}).
• Offline records are stored in private app sandboxed storage on your device.

6. Data Retention and Account Deletion

We retain your data only for as long as your account remains active.

How to Delete Your Account and Data:

• In-App Deletion: You can permanently delete your account, business profile, inventory, sales, and Khata records (including customer names and phone numbers you entered) at any time by going to Settings > Google Cloud Backup > Delete Account & Cloud Data.
• Web Deletion Portal: If you have uninstalled the app or cannot access your device, you can request account deletion online at Account Deletion Portal.

On a successful in-app deletion, records under your Firebase account (shops/{userId} in Firestore) and your Firebase Authentication profile are permanently purged. Web portal requests are handled manually (usually within about 48 hours). Google Drive OAuth access is revoked on successful in-app deletion; any files already saved in your personal Google Drive remain under your control and are not deleted by the app.

7. Children's Privacy

DigiShop is intended for business owners and retail operators. It is not directed at or designed for children under the age of 13. We do not knowingly collect personal information from children.

8. Changes to This Privacy Policy

We may update our Privacy Policy periodically. We will notify you of any material changes by posting the new Privacy Policy within the app and updating the "Last Updated" date at the top.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data privacy, please contact us:

Email: techflow0500@gmail.com
Developer: Shahab Khan (DigiShop Team)
Web Portal: https://shopkeeper-a977a.web.app