Privacy Notice

Depending on how you use the website and the apps, we collect:

• Demo requests — your name, business name, mobile number, business type, number of locations, and (optional) email and message, when you fill out the "Book a demo" form. To stop the form being abused, we also keep a one-way code derived from your network address for about a day.
• Account information — your name and email address, and either a password (stored only as a secure hash by our sign-in provider) or, if you choose Google sign-in, the name, email and profile details Google shares with us. You may also add a phone number, an address, a profile photo and an override PIN (stored only as a secure hash). Store details you add — store name, address, contact number, TIN, business permit number and store photo — are kept too.
• Business data you enter — products, sales (including GCash or Maya reference numbers you record), customers and their utang balances and payments, suppliers, expenses and receipt images, staff accounts, paired devices and reports. All of it stays tied to your store and is not visible to other stores.
• Activity records — a log of sensitive actions: who did what and when, with the values before and after. Some records of account and administrative changes also include the network (IP) address and the browser or device description they came from.

• To respond to demo requests and set up your account.
• To operate the product — point of sale, inventory, customers, accounting and reports.
• To keep the service secure: sign-in checks, PIN lockouts, limits on repeated requests, and the activity log.
• To respond if you contact us for support.

The app records the e-load, cash-in and cash-out transactions you handle, but it does not connect to any payment or e-load provider, so no transaction details are sent to one.

We do not sell your information, and we do not use advertising trackers.

On the public pages of this website only — the home page, pricing, this notice and the terms — we use two measurement tools from Vercel, who host the site: Web Analytics, which counts page views, and Speed Insights, which measures how quickly pages load. They record the page (without anything after a "?" or "#" in its address), the referring site, and the visitor's country, browser and device type. Nothing is measured once you are signed in, and nothing is measured inside the app.

The app itself sets no cookies. It does keep some things on the device you use it on:

• Your sign-in — in the web app, only if you tick "keep me signed in"; in the phone apps, encrypted, with the key held in the phone's secure storage.
• A working copy of your store's data, including the customer list, so the web app can reopen quickly. It lasts until the browser tab is closed, for at most 12 hours, and signing out removes it together with any unfinished cart and your own profile preferences.
• Sales not yet sent (when the connection drops) and held sales. These stay after signing out, so that no sale is lost; unsent sales are sent once someone from the same store is signed in on that device and online.
• The shop's device settings — receipt, fee, alert and opening-hours choices — and, on phones, the current cashier's session.

Every store's data is isolated from every other store's, enforced by the database itself rather than only by the app, and within a store what each person can see depends on their role.

These companies process data on our behalf:

• Supabase — the database, sign-in accounts and file storage behind the app, on servers in Tokyo, Japan. Supabase states that it encrypts data in transit and at rest.
• Vercel — hosting for the website and app, and the page measurement described above.
• Cloudflare — the network provider in front of Supabase, which carries requests to it.
• GitHub — runs our nightly database backup. The backup copy itself is kept in our own Supabase storage, not at GitHub.
• Google — the Tindahan POS, Inventory and Platform web apps load fonts from Google Fonts, which means your network address reaches Google; and Google handles sign-in if you choose "Continue with Google".

These providers operate outside the Philippines, so your data is transferred and processed abroad, mainly in Japan.

Passwords and PINs are stored only as secure hashes, and PIN hashes are never sent to the app. Repeated wrong PINs lock the PIN for a while. Every store's rows are fenced off in the database, so a request from one store cannot read another's even if the app is bypassed. Sensitive actions — voiding a sale, changing prices or stock, deleting a customer — are written to an activity log that cannot be edited or deleted. Sign-ins kept on phones are encrypted.

No system is perfect. If personal data is exposed in a way that puts you at real risk, we will tell you and the National Privacy Commission within 72 hours of knowing, as the Data Privacy Act requires, and say what happened and what we are doing about it.

• Export — in the web app, Settings → Backup gives you your sales and products as spreadsheets and a full backup file that includes your customers. The Tindahan POS phone app can also export customers as a spreadsheet.
• Correct — you can change your name, phone, address and photo in Settings, and an admin can correct customer and supplier records.
• Delete your account — from any of the apps: Settings in the Tindahan POS web app, Profile in the Tindahan POS phone app, More in the Accounting and Inventory phone apps, and the header or sidebar of the Accounting and Inventory websites. If your store has another admin, your account is deleted straight away. If you are the only admin, deleting your account closes the whole store, so it is sent to our team to review first.
• Demo request follow-up — if you'd rather we not contact you about a demo request you submitted, or want it deleted, tell us at the email below.

• Business data stays for as long as your store's account is active. When a store is closed, its sales and other records are kept, because Philippine tax rules require businesses to preserve their records for years. We have not yet fixed the exact period.
• When you delete your account, your sign-in account, your staff record in the app and your profile photo are deleted. A disabled internal record of your name, email and phone, a closed internal staff record, and the activity-log entries about what you did, remain.
• When a store deletes a customer, the activity log keeps the customer's name, phone and balance as they were at deletion.
• Demo requests are deleted automatically 12 months after they were submitted.
• Backups of the database are kept for 30 days, so deleted information can remain in a backup for up to 30 days.

As a data subject under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to:

• Be informed that your personal data is being processed — this notice is part of that.
• Access your personal data and get a copy of it (the in-app export covers most of this already).
• Correct any inaccurate or outdated information we hold about you.
• Object to, or ask us to erase or block, processing of your data, where the law allows — for example, a demo request we haven't yet acted on.
• Data portability, for data we process by electronic means.
• File a complaint with the National Privacy Commission if you believe your rights were violated.

To exercise any of these, contact us at the email below. We haven't yet formally confirmed whether NPC registration applies to us at our current size — we intend to comply with whatever the law requires as the business grows.

Questions about this notice or your data can go to dobluis.lyndell@gmail.com. This is a temporary contact address while we finish setting up a dedicated domain.