Privacy policy

Account information

• Your mobile phone number, which you use to sign in. We send the one-time sign-in code to that number through Telegram.
• Your business profile: business name, business type, country, currency, logo, and branch names and addresses.
• Staff you add: their names, roles and branch access, and the PIN they use to sign in on a shared device. PINs are stored in hashed form.

Business data you enter in the app

• Products, prices, inventory and stock movements, discounts, coupons and taxes.
• Sales, refunds and voids, including items, totals, payment methods and the time of each sale.
• Customer records you choose to keep, such as a customer's name, phone number, email address and notes (see "Your customers' information" below).

Subscription information

• Whether you are on the free or Premium plan and your subscription status.
• If you buy Premium in the app, Apple processes the payment. We never receive your card details or Apple ID password.
• If you pay us directly, we keep a record of the payment: the amount, date, payment method, reference number, and the name and contact details on the payment or invoice. We use it to activate your subscription, issue receipts and meet tax and accounting obligations.

Usage and device information

• The actions you take in the app, such as signing in, completing a sale, reaching a plan limit or starting a subscription, along with details like the sale total, currency and number of items. We never include product names, customer names, customer phone numbers or notes in this information.
• Your device model, operating system version, app version, language and an app-generated identifier.
• With your permission, your device's advertising identifier (see "Advertising measurement and tracking").

Information that stays on your device

• The app asks for camera access to scan product barcodes, Bluetooth and local network access to connect to receipt printers, and permission to save receipt images to your photo library. Camera images, printer connections and saved photos are not sent to us.

• To create and secure your account and sign you in.
• To run your registers, sync your data across your devices and branches, and show your reports.
• To manage your subscription and the features of your plan.
• To provide support. For example, we may look up your account by the phone number you contact us from.
• To understand how the app is used so we can fix problems and improve it.
• To measure which of our ads bring new businesses to CashBear (see below).
• To detect and prevent fraud and abuse, and to meet legal obligations.

We do not sell your information. We do not use your customers' information for advertising.

We advertise CashBear on Meta platforms (Facebook and Instagram). To measure which ads lead to new sign-ups, the app uses Meta's SDK to send Meta the following: app installs and launches, sign-ins, subscription purchases and renewals, and a "purchase" event for each completed sale containing the sale total and currency. These events are linked to an account identifier we create. We never send Meta your phone number, business name, product names or customer details.

iOS asks for your permission before the app shares your device's advertising identifier with Meta for this purpose. If you decline, Meta receives the events only without that identifier and uses them in aggregated form. You can change your choice at any time in Settings > Privacy & Security > Tracking on your device.

When you store information about your own customers in CashBear, you decide what to collect and why, and we process it on your behalf only to provide the service. You are responsible for having a lawful basis to collect it and for informing your customers. We do not contact your customers or use their information for our own purposes.

We share information only with the service providers that help us run CashBear, and only what each one needs. Each provider is contractually required to protect the information it receives at least as well as this policy does, and to use it only to provide its service to us. Meta and Apple also process information under their own privacy policies.

We may also disclose information when the law requires it, to protect our rights or the safety of our users, or as part of a merger or sale of our business. In that case, this policy continues to apply to your information.

We keep your account and business data for as long as your account is open.

Deleting your account: In the app, go to Settings > Merchant Profile > Delete Account. If you sign back in within 30 days, the deletion is cancelled. After 30 days, we permanently delete your account, business data, staff and customer records, and uploaded images. You can also request deletion by emailing [email protected].

Database backups are kept for up to 30 days and are then deleted automatically. After you delete your account, analytics data linked to it is deleted or de-identified. We may keep limited records longer only if the law requires it, for example for tax or fraud-prevention purposes.

Access and export: You can view your data in the app at any time and export sales and inventory as CSV files.

• Correction: You can edit your business profile, staff, products and customers in the app.
• Deletion: See "Keeping and deleting your data" above.
• Tracking: You can allow or deny tracking at any time in iOS Settings.
• Other requests: Email [email protected]. We will respond within 30 days.

Depending on where you live, you may have other rights over your personal data, such as the right to object to or restrict certain processing, or to complain to your local data protection authority.

Data is encrypted in transit and at rest. Access to production systems is limited to the people who need it. Staff permissions and branch access are enforced on our servers, not just in the app. No system is perfectly secure, so please keep your phone and Telegram account secure, set PINs for your staff, and give each staff member only the permissions they need.

CashBear is a business tool. It is not directed at children, and we do not knowingly collect information from children.

Our service providers may process information in countries other than yours. When they do, we require appropriate safeguards to protect it.

If we change this policy, we will update the date above. For significant changes, we will notify you in the app before they take effect.

If you have questions about privacy, email [email protected].