Privacy Policy
PokePOS is a mobile point-of-sale app made by HackSonDev, LLC ("we", "us"). This policy explains what information we collect when a business and its team use PokePOS, how we use it, and the choices you have. We do not sell personal information, we do not show ads, and we do not track you across other companies' apps or websites.
Who this applies to
- Business owners who create a business in PokePOS.
- Sellers invited by an owner to sell for that business.
- Customers of those businesses, only to the extent described in "Customer information" below.
A business that uses PokePOS decides what it sells and who it sells to. For the sales and customer information a business records, that business is responsible for its own privacy practices, and we process that information on its behalf.
Information we collect
Account information
Your email address (used to sign in with a one-time code or link) and your name.
Business information
Business name, sales tax rate, team members and their roles, pending invitations, and subscription plan and status.
Catalog and inventory
Items, prices, costs, categories, SKUs and barcodes, stock levels and stock history, and item photos you choose to add.
Sales
Items sold, amounts, taxes, payment method, time of sale, the seller who made it, refunds, and for cash sales the amount received. For card payments we receive only the card brand and last four digits from our payment processor; we never receive or store full card numbers.
Customer information
If a customer asks for an emailed receipt, the business may enter that customer's email address. It is used to send the receipt.
Device permissions
- Camera: to scan barcodes and take item photos. We only keep photos you save to an item.
- Photos: only the photo you pick for an item.
- Location: required by our payment processor, Stripe, to accept card payments (Tap to Pay). It is used for payment security and compliance and is not used by us to track you.
- Bluetooth: only to connect card readers, if you use one.
Technical information
Our service providers keep standard server logs (such as IP address, device and browser type, and request times) to operate, secure and debug the service.
How we use information
- To provide PokePOS: sign-in, selling, inventory, reports, team management and receipts.
- To process card payments and refunds through Stripe, and subscriptions through the App Store or Google Play.
- To send service emails, such as sign-in codes, invitations and receipts.
- To keep PokePOS secure, prevent fraud, and fix problems.
- To comply with legal obligations.
Service providers we share information with
We share information only with providers that help us run PokePOS, and only as needed for that purpose:
- Supabase — database, sign-in and file storage (hosted in the United States).
- Stripe — card payments, Tap to Pay and payouts to the business. Businesses that accept cards also agree to Stripe's terms, and Stripe processes payment data under its own privacy policy.
- Apple (App Store) and Google (Google Play) — subscription purchases. We receive the subscription status, not your payment details.
- RevenueCat — manages subscription status for the business account.
- Resend — delivers our emails.
- Cloudflare — hosts pokepos.com.
We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger or acquisition, in which case this policy will continue to apply.
Who can see what inside a business
The owner can see the business's catalog, inventory and all sales. Sellers can see the catalog and only their own sales. People outside a business cannot see its data.
Retention and deletion
We keep information while the business account is active. Owners can remove sellers at any time. You can delete your account in the app at any time from More → Delete account: for a seller this deletes their account (sales they made stay with the business as part of its records); for an owner it deletes the account and the business with all of its data. You can also email support@pokepos.com from the email address you use in PokePOS. Deletions made in the app happen right away; requests by email are completed within 30 days, except for records we must keep by law (for example, payment and tax records), which we keep only as long as required. Payment records held by Stripe, Apple or Google are subject to their own retention rules.
Your rights
You can ask to access, correct, download or delete your personal information by emailing support@pokepos.com. Depending on where you live (for example, California), you may have additional rights, and we will not treat you differently for using them. If you are a customer of a business that uses PokePOS, you can also contact that business directly.
Security
Information is encrypted in transit, access is limited by role, and card data is handled by Stripe, not by us. No system is perfectly secure, so please keep your email account safe, since it is used to sign in.
Children
PokePOS is a business tool and is not directed to children under 13. We do not knowingly collect information from children under 13.
Changes
We may update this policy. If we make significant changes, we will notify owners in the app or by email before they take effect. The date at the top shows the latest version.
Contact
HackSonDev, LLC — support@pokepos.com