Privacy Policy

1. Who we are

Pocket POS ("we", "us") provides a mobile app and website that help small shops record sales, stock, customers, dues and expenses. This policy explains what information the app and website collect, why, and what choices you have.

Contact: [email protected]

2. Information we collect

• Account and shop details: shop name, owner and staff names, mobile phone number, optional email address, shop address (division, district, upazila), shop type and shop logo. Your PIN is stored only as a one-way hash — we cannot read it.
• Business records you enter: products and their photos, stock, prices, customers (name, phone, due balance), sales, payments, expenses, suppliers, purchases, bookings and installments.
• Device information: a device identifier and device name (used to number invoices per device and keep devices in sync), the app version, and a notification token (so we can send you notifications).
• Payment references: when you buy a plan or SMS credits from us, the transaction ID and the number you paid from.
• Messages you send us through Support & requests, together with your shop details.
• Verification data: your phone number or email, to send one-time verification codes.

3. Information we do not collect

We do not collect your precise location, your contacts, your SMS inbox, your microphone recordings or an advertising ID. The app contains no advertising and no third-party analytics or tracking SDKs.

4. App permissions

• Camera — to scan barcodes and QR codes and to take product or logo photos. Scanning happens on your phone.
• Bluetooth (and, on some Android versions, the location permission Android requires for Bluetooth scanning) — only to find and connect to your receipt printer. We do not read, use or store your location.
• Notifications — to tell you about payments, plan and SMS-credit updates and announcements. You can switch them off in your phone settings.
• Biometrics / screen lock — optional app lock; handled by your phone, we never receive your fingerprint or face data.
• Photos/gallery — only the pictures you choose to upload as a logo or product photo.
• Internet — to sync your shop data and use online features. The app also works offline and syncs later.

5. How we use information

• To run the service: sign you in, sync your data between your devices, produce reports and receipts.
• To verify your phone number or email and keep accounts secure.
• To process plan and SMS-credit payments and apply them to your shop.
• To send service notifications, and to answer your support and customization requests.
• To prevent abuse and fix problems.

6. Sharing

We do not sell your information. We share it only with services that help us run Pocket POS, and only as needed:

• Google Firebase Cloud Messaging — delivers push notifications (receives your device notification token and the message).
• Email delivery provider (Brevo) — sends verification and support emails.
• SMS gateway — sends verification codes and, if a shop turns the feature on, SMS messages to that shop’s customers.
• Our hosting and infrastructure providers — store the data on our servers.
• Authorities — if the law requires it.

7. Customer SMS

If a shop owner turns on customer SMS, the customer’s phone number and the message text are sent through our SMS gateway. The shop owner is responsible for using this feature lawfully and for the customer data they enter in the app.

8. Storage and security

Data is stored on your phone (in a local database) and on our servers. Data travels over encrypted connections (HTTPS). PINs are hashed, and your sign-in token is kept in your phone’s secure storage. No system is perfectly secure, so please keep your PIN private and use the app lock on shared phones.

9. Keeping and deleting your data

We keep your data while your account is active. You can delete products, customers and other records inside the app.

To delete your whole account and its data yourself: in the app open Settings → Delete my account, or use the web page https://app.pocketposbd.com/delete-account (no app needed). The shop owner deletes the entire shop; a staff member deletes only their own login. Deletion is immediate once you confirm with your PIN. If you cannot sign in, email [email protected] from the phone number or email registered with your shop and we will delete it within 30 days. We may keep limited records that the law or accounting requires, such as plan payment records.

10. Your choices

• See and correct your shop details and records in the app.
• Ask us for a copy of your data or for corrections.
• Turn off notifications or camera/Bluetooth access in your phone settings.
• Ask us to delete your account (section 9).

11. Children

Pocket POS is a business tool and is not directed to children.

12. Changes to this policy

If we change this policy we will update the date above and, for important changes, tell you in the app.

13. Contact

Questions or requests: [email protected]