Privacy Policy

NaBites SmartPOS is a point-of-sale app for store owners and staff. It is not a consumer shopping app. Data described here is collected from the merchant (store account) and, where the merchant records it, from their walk-in customers at checkout.

Store and staff accounts. Owner email and store password for SmartPOS sign-in, staff name, role, and a hashed cashier PIN for daily billing.

Device details. Device type (phone or tablet), operating system, a generated hardware identifier, and a device label so the store can manage which registers are connected.

Store operations data. Products, categories and images, stock, customers (typically name and phone), sales, payments recorded at the counter (for example cash or UPI), suppliers, purchases, expenses, loyalty points, and settings the store configures in the app.

Optional device permissions. Camera for barcode scanning and product photos. Photo library to set catalog images. Bluetooth to talk to a receipt or label printer. Location permission on some Android versions is requested only so nearby Bluetooth printers can be found — we do not use it to track you.

• Sign you in and keep the register secure (store password and cashier PIN)
• Run billing, catalog, stock, and staff features offline and online
• Sync store data to your NaBites cloud account when you are online
• Print or share bills when you choose to (for example WhatsApp)
• Check that the store subscription is active
• Diagnose sign-in or sync problems when you contact support

The app stores catalog and sales locally on the device so billing works offline. When the store is connected, data is synced over HTTPS to NaBites servers. API keys and session tokens are stored in the device secure storage (Keychain / Keystore), not in plain text files.

We do not sell personal information and we do not show ads in the app. We share data only:

• With staff of the same store, according to their role
• With infrastructure providers that host our API and email (for example to send the sign-in code)
• When you share a bill yourself (WhatsApp or the system share sheet)
• If required by law

Card numbers are not collected by NaBites SmartPOS. Counter payments you record (cash, UPI, and similar) stay as store transaction records.

Traffic to NaBites APIs uses HTTPS. PINs and one-time codes are stored as hashes, not as readable secrets. Access to a store is limited to signed-in staff for that store.

We keep store and staff data while the store account is active. You can request full account deletion at any time. After deletion we may keep billing or tax records for up to 7 years where Indian law requires it. Local data on a device is removed when the app is uninstalled or the store is signed out and local data is cleared.

Store owners can review and edit catalog, customer, and staff data in the app. To delete the NaBites account and associated cloud data, use our account deletion page or email [email protected].

Walk-in customers should ask the store directly about their checkout details. The store is the controller of that customer data; NaBites processes it to provide POS software to the store.

NaBites SmartPOS is a business tool. It is not directed at children under 13, and we do not knowingly collect data from children.

We may update this policy when the app or our practices change. The date at the top of this page will be updated. Continued use of the app after a change means you accept the updated policy.

NaBites — SmartPOS
Email: [email protected]