POSSible

1. Information We Collect

1.1 Information You Provide

1.2 Automatically Collected Information

• Device Information: Device type, operating system, app version
• Usage Analytics: Feature usage, crash reports (anonymous)
• Performance Data: App performance metrics for optimization

1.3 Information We DO NOT Collect

• We do NOT track your location
• We do NOT access your camera or microphone (except when you explicitly use barcode scanner)
• We do NOT read your contacts or SMS
• We do NOT collect personal identification documents

2. How We Use Your Information

2.1 Free Tier Usage

• 100% Local Storage: All your data stays on your device
• No Cloud Upload: Your business data is never transmitted to our servers
• Offline Operation: No internet connection required
• Anonymous Analytics: Only anonymous usage statistics (opt-in)
• Advertising: Supported with non-intrusive ads

2.2 Premium Tier Usage

• Cloud Synchronization: Sync data across devices using Firebase
• Multi-User Access: Share data with team members securely
• Automatic Backups: Protect your data with cloud backups
• Support Services: Provide priority customer support
• Ads-Free: Enjoy an ads-free experience

2.3 General Uses

• Provide and maintain the Software
• Process transactions and subscriptions
• Send important service announcements
• Improve features and user experience
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. Data Storage and Security

3.1 Local Data (Free & Premium)

• Encryption: AES-256 encryption for all local data
• Device Storage: Data stored in app-specific secure storage
• Your Control: You can delete local data at any time

3.2 Cloud Data (Premium Only)

• Firebase Platform: Industry-leading Google Cloud infrastructure
• Data Centers: Stored in secure, redundant data centers
• Encryption in Transit: TLS/SSL for all data transmission
• Encryption at Rest: Encrypted when stored in Firebase
• Access Control: Role-based permissions enforced

3.3 Security Measures

• Regular security audits and updates
• Secure authentication using Firebase Auth
• Protection against common vulnerabilities
• Monitoring for suspicious activities

4. Data Sharing and Disclosure

4.1 We DO NOT Sell Your Data

We will never sell, rent, or trade your personal or business data to third parties. Period.

4.2 Limited Sharing

We may share data only in these specific circumstances:

• Service Providers: Firebase (Google) for cloud infrastructure (Premium only)
• Payment Processors: Google Play / Apple App Store for subscription billing
• Legal Requirements: When required by law, court order, or regulatory authority
• Business Transfer: In the event of merger, acquisition, or sale of assets (with notice to you)

4.3 Your Team Members (Premium Only)

• Users you add to your store can access shared business data
• Access is controlled by role-based permissions (Admin, Manager, Cashier)
• You are responsible for managing your team's access

5. Your Rights and Choices

5.1 Access and Control

You have the right to:

• Access: View all your data stored in POSSible
• Export: Download your data in common formats (CSV, PDF)
• Modify: Edit or update your information at any time
• Delete: Remove your data and close your account

5.2 Data Portability

• Export products, sales, and reports at any time
• No vendor lock-in - take your data with you
• Standard formats compatible with other software

5.3 Account Deletion

To delete your account:

• Go to Settings → Account → Delete Account
• Or email possible_help@outlook.com with your request
• Local Data: Deleted immediately from device
• Cloud Data: Retained for 90 days (for recovery), then permanently deleted
• Billing Records: Retained as required by law (typically 7 years)

5.4 Marketing Communications

• We send only essential service emails by default
• You can opt-in to promotional emails (special offers, updates)
• Unsubscribe at any time via email footer link
• We will never spam you

6. Children's Privacy

POSSible is designed for business use and is not intended for children under 13 years of age. We do not knowingly collect information from children.

If you believe a child has provided us with personal information, please contact us at possible_help@outlook.com and we will delete it immediately.

7. International Data Transfers

POSSible is based in the Philippines. If you use the Software from outside the Philippines:

• Your data may be transferred to and stored in the Philippines
• Cloud data (Premium) is stored on Firebase servers (Google Cloud regions)
• By using POSSible, you consent to this transfer
• We implement appropriate safeguards for international transfers

8. Cookies and Tracking

8.1 Mobile App

• We do NOT use cookies in the mobile app
• We do NOT use third-party tracking or advertising SDKs
• Firebase Analytics is used for basic app usage statistics (anonymous)

8.2 Web Version

• Essential cookies for app functionality only
• No advertising or tracking cookies
• No third-party analytics scripts

9. Data Retention

10. Changes to Privacy Policy

We may update this Privacy Policy from time to time. When we do:

• We will update the "Last Updated" date at the top
• We will notify you via email for material changes
• An in-app notification will alert you to the update
• Continued use after changes constitutes acceptance

We encourage you to review this policy periodically.

11. Third-Party Services

11.1 Firebase (Google Cloud) - Premium Only

• Used for cloud storage, authentication, and synchronization
• Subject to Google's Privacy Policy
• GDPR and international privacy law compliant

11.2 Payment Processors

• Google Play (Android) and Apple App Store (iOS)
• We do NOT store your payment card information
• All payment processing is handled by app stores

12. Your Philippine Privacy Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), Philippine residents have additional rights:

• Right to be informed about data collection
• Right to object to processing
• Right to access your data
• Right to rectify inaccuracies
• Right to erase or block data
• Right to data portability
• Right to file a complaint with the National Privacy Commission