Privacy

What is recorded

The things you enter: products, their photos and prices, the shops you buy from with their stall numbers and contacts, your order lists, and your stock. Plus your name, email address and — if you set one — a password, stored only as a hash that cannot be reversed.

If you pin your location on a capture, the coordinates are saved with that item. That is the only location data recorded, and only when you press the button.

Who can see it

Your business's records are private to your business. Nobody in another business can read them. The ordinary screens of this app give no route from one business to another: what you can see is decided by which business you are in, and paying for a bigger plan does not widen it.

Two exceptions, and we would rather name them than let you assume otherwise.

• A share you grant yourself, from the Sharing screen. View-only, one-directional, and revocable at any time.
• Whoever runs this installation can open your account. Their console is built for accounts rather than records — it creates businesses, moves people between them, sets plans and records invoices — but it also has a "view as" that opens your screens read-only. Every use of it is written to the audit log with who did it and when.

That second one is a real capability and not a formality. If you need records nobody but you can reach, this is not the tool for them.

What leaves your device

Captures are written to your phone first and uploaded to this installation's own server when you have signal. Photos are shrunk on the phone before they are sent.

Business cards you scan are sent to an external reading service when the phone has signal, so the text can be read off the photo. The photo goes from your phone to this server and from there to the service; it is used to answer that one request and is not used to train anything. With no signal the card is read on the phone itself and no image leaves it.

Nothing here is sold, and nothing is shared with advertisers. There is no analytics or tracking script in this app.

How long it is kept

Until you delete it. Suspending a business does not delete anything — its records stay exactly where they are and come back when the suspension is lifted. If you want a business's data removed entirely, ask whoever runs this installation.

Cookies

One: the session cookie that keeps you signed in. It is httpOnly, sent only over HTTPS in production, and carries no personal information — just a session identifier. There are no third-party cookies.