Legal

App Privacy Policy

Last updated: 29 August 2026

This policy covers the PureDesign AI LLC mobile apps: PureDesign POS Manager (phone) and PureDesign POS Loyalty (tablet), together with the PureDesign POS software they connect to. It is written to be read, not skimmed past — it says what the apps actually send us and what we do with it.

1. Who the data belongs to

These apps are business tools. Almost everything in them — products, prices, stock, sales, loyalty records — belongs to the shop that bought the software, not to you personally. The shop decides what goes in; we store and move it on the shop's behalf so its till, phone, and tablet all agree. Your personal data in the apps is small by design: an account to sign in with, and the record of you signing in.

2. What the apps collect

Your account

• Email address — it is your sign-in name and how we reach you about the account.
• Password — stored only as a one-way hash. We cannot read it, and nobody at PureDesign AI can tell you what it is.
• Which shops you belong to and your role in each (owner, manager, and so on), which is what decides the things you are allowed to do.

Signing in

• Sign-in sessions. When you sign in, we issue your device a token so it does not have to ask for your password every time. We keep the record needed to check that token and to revoke it.
• Fingerprint / face unlock. If you turn this on, your phone checks your fingerprint or face itself and simply tells the app "yes". The fingerprint or face never leaves your device and we never receive it. What we hold is a credential registered to that one device, which we can revoke.

The shop's business data

• Products, barcodes, prices, stock levels, departments and categories, discounts, stock adjustments, and label templates.
• Sales, shift, transaction, and employee reports produced by the till.
• Loyalty records, which can include a customer's name, phone number, or email address — whatever the shop chooses to record — plus their points and rewards. This is the shop's customer data. We hold it for the shop, we do not use it for our own purposes, and we never sell it.

Payment and subscription

Subscriptions are billed through Stripe. When you manage a subscription from the app it opens Stripe's own hosted payment page in your browser. Card numbers go straight to Stripe — they never pass through the app or our servers, and we never store them. What we keep is the subscription's status: which plan, whether it is paid, and when it renews.

Diagnostic logs

The apps send us structured diagnostic log lines so we can tell why something broke. Each line is labelled with only three things: which app it came from, a store identifier, and a severity (debug, info, warning, error). The lines describe what the software was doing — a sync ran, a request failed — not who you are. They are not linked to advertising and they are not shared with anyone.

Permissions the apps ask for

• Camera — to scan barcodes. Frames are processed on the device to read the barcode; we do not receive photographs.
• Photos — only if you pick an image to put on a printed label.
• Bluetooth — only to talk to a label printer you pair with.
• Biometrics — only if you turn on fingerprint or face unlock.

3. What the apps do not do

• No advertising. There are no ad networks, no advertising identifiers, and no ad tracking in these apps.
• No third-party marketing analytics. There is no analytics, attribution, or crash-reporting SDK bundled in them. Our diagnostic logs, described above, are the only telemetry.
• No selling or sharing. We do not sell your personal information or the shop's data, and we do not share it for anyone else's advertising.
• No background location tracking. The apps do not ask for or collect your location.

4. Who else receives data

We keep the list of companies involved deliberately short. Each processes data under its own terms.

• Stripe — subscription billing and card payments.
• Supabase — the managed PostgreSQL database the account and shop data live in.
• OVHcloud — the servers our software runs on.
• Grafana Cloud — where the diagnostic log lines described above are stored and searched.
• Google Fonts — the apps fetch their typefaces from Google's font servers the first time they run, so Google may see your device's IP address as part of that request.
• Apple and Google — the app stores that distribute the apps and handle their updates.
• Cloudflare — hosting for this website (not the apps).

5. How long we keep things

Your account and the shop's data stay for as long as the shop is a customer and you have an account with it. When you delete your account, what goes and what stays is set out in full on the delete your account page — please read that rather than assume, because the answer is specific.

Diagnostic logs are short-lived by nature: they are kept only as long as they are useful for troubleshooting and then age out of our logging service.

6. Security

Traffic between the apps and our servers is encrypted in transit. Passwords are stored only as hashes. Sign-in tokens and device credentials can be revoked, and deleting your account revokes them straight away. Signing in stops immediately — every sign-in path re-checks the account and refuses it. An app that is already open may keep working for a few more minutes, until its current session expires, after which it cannot renew.

7. Children

These are business apps for shop owners and their staff. They are not directed at children and we do not knowingly collect information from children.

8. Your choices

• See or correct your data — ask the owner of your shop, who can change your role and details, or email us at the address below.
• Turn off fingerprint or face unlock — in the app's settings, at any time.
• Delete your account — see delete your account.

9. Changes

We may update this policy. The "last updated" date above always reflects the current version, and material changes will be described in the app's release notes.

10. Contact

Questions about app privacy, or a request about your data? Email support@puredesignai.com.
PureDesign AI LLC · Georgia, USA.