Privacy Policy for Casheck POS

This Privacy Policy explains how Casheck POS ("we", "our", or "the application") processes, stores, and protects your information. Casheck POS is built with an offline-first architecture to ensure business owners maintain full control over their sales and store records.

1. Data Storage and Local Processing

All core business operations are performed locally on your device without cloud dependency:

• Catalog & Sales Records: Products, categories, prices, inventory counts, and completed receipts are stored locally on your device in an on-device database.
• Product Images: Images assigned to products are stored locally in the application's private internal storage directory.
• Security Credentials: If optional owner PIN protection is enabled, the 4-digit PIN is cryptographically salted and hashed using SHA-256 before being saved to local settings. PINs are never stored in plaintext.

2. Device Permissions and Usage

The application requests only permissions essential to its functionality:

• android.permission.CAMERA: Used for real-time barcode scanning and taking product photos. Camera frames are analyzed in-memory on the device and are never recorded or transmitted remotely.
• android.permission.ACCESS_LOCAL_NETWORK: Required on Android 17 and newer to run the local embedded web server for the optional Customer-Facing 2nd Display feature. This allows another device on the same local Wi-Fi network to view the shopping cart. No data is transmitted across the internet.

3. Third-Party Services and Network Activity

External network communication is strictly limited to the following third-party integrations:

• Google Play Billing: Used to process merchant subscriptions and verify purchases directly through Google Play. Payment transactions are governed by the Google Privacy Policy.
• Google Firebase Remote Config & Analytics: Used to fetch promotional subscription discount configurations and collect aggregated, non-personally identifiable diagnostic metrics (such as app launches, screen views, session duration, and subscription events) to ensure application stability. No sales data, product catalogs, or customer records are ever transmitted. Advertising identifiers (AD_ID) are strictly disabled.
• Google ML Kit: Processes camera image streams on-device for barcode detection without sending imagery to remote servers.
• OpenFoodFacts API (Optional): Used solely when creating a new product or via manual search in the product editor to auto-fill product names, weights, and photos from the public OpenFoodFacts database. Regular barcode scanning during checkout operates entirely offline against your local database. No personal, sales, or business data is ever transmitted.

4. Data Backup, Export, and Deletion

• User-Controlled Backups: You can export a complete backup archive (ZIP file containing the database and product photos) at any time. You choose where to save or share this file.
• Data Deletion: You can delete past receipts, products, or clear the entire database directly within the app. Uninstalling the application permanently deletes all locally stored data and cached images from the device.

5. Advertising and Tracking

Casheck POS contains no third-party in-app advertisements. We do not track users across other apps or websites, and we do not sell or monetize merchant transaction data.

6. Children’s Privacy

Casheck POS is a commercial point-of-sale tool intended for retail operators and business owners. It is not directed at or designed for children under the age of 13. We do not knowingly collect personal information from children.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

8. Contact Information

If you have any questions regarding this Privacy Policy or your data privacy in Casheck POS, please contact us at:

Email: gamaung@proton.me