Privacy Policy for POS Pintar: Kasir Warung

Effective Date: September 23, 2026

Last Updated: September 23, 2026

Potensiku Indonesia (Developer: Potensiku Indonesia, “we,” “our,” or “us”) operates the POS Pintar: Kasir Warung mobile application (Package Name: com.aplikasi.kasir.pos.pintar, hereinafter referred to as the “Application”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application published on Google Play and integrated services, including Google OAuth 2.0 authentication and Google API Services.

By using the Application, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

A. Information You Provide Directly

Account & Store Information: Name, email address, store/business name, phone number, and authentication credentials when you create or register an account.
Business & Transaction Data: Product catalog items, prices, inventory levels, sales records, shift history, barcode scans, and customer debt/piutang notes entered into the Application.
User Communications: Support inquiries, feedback, and correspondence sent to our support email (potensikuid@gmail.com).

B. Information Accessed via Google OAuth & Google APIs

When you sign in using your Google Account or grant access via Google OAuth 2.0, we request access strictly to basic user identity scopes:

Basic Profile Information (openid, profile, email): Your Google Account email address, full name, profile image, and unique Google user ID.
Specific API Data: None beyond basic profile authentication data (openid, profile, email). We do not access your Gmail, Google Drive, Google Contacts, or Google Calendar.

C. Automatically Collected Data (Google Play / Android)

Device & Usage Identifiers: Device model, Android OS version, unique device identifiers (e.g., Android ID), application version (v1.7.4 or later), network state, and IP address.
Diagnostics & Performance Data: Anonymous crash logs, stack traces, and performance metrics collected via Google Play Vitals / Firebase to maintain app stability.
Location Data: We do not collect, store, or track precise GPS location data.

2. How We Use Your Information

We use the collected information strictly for operational and product functionality purposes:

To authenticate your identity and provide secure sign-in via Google OAuth.
To operate, maintain, and deliver point-of-sale features (managing inventory, recording sales transactions, generating automated financial reports, and tracking debt/piutang).
To process/record digital payments.
To provide technical support and respond to user inquiries sent to potensikuid@gmail.com.
To ensure application security, prevent fraudulent activity, and maintain service stability.

3. Google API User Data & Limited Use Disclosure

Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Regarding data accessed via Google OAuth and Google API Services:

Limited Purpose: Google user data is accessed solely to authenticate your account and provide user-facing features prominently visible within POS Pintar: Kasir Warung.
No Sharing / Transfer: We do not transfer, sell, or share Google user data with third parties, except:
1. As necessary to provide or improve application functionality;
2. To comply with applicable laws or valid legal processes;
3. As part of a merger, acquisition, or asset sale, with explicit notice to users.
No Advertising Use: We never use or transfer Google user data for serving personalized, retargeted, or interest-based advertising.
Human Access Restrictions: Human beings will not read your Google user data unless:
- You give explicit consent for troubleshooting purposes;
- It is required for security investigations (such as fraud or abuse);
- It is required to comply with applicable law; or
- The data is aggregated and anonymized for internal technical operations.

4. How We Share Information

We do not sell, rent, or trade your personal or business information. Data is shared only under the following conditions:

Third-Party Service Providers: We work with compliant cloud infrastructure providers (e.g., Google Firebase / Google Cloud Platform) that process data strictly on our behalf under contractual privacy obligations.
Legal & Regulatory Compliance: We may disclose data if legally required by subpoena, court order, or official governmental regulation in Indonesia or applicable jurisdictions.

5. Third-Party SDKs & Services

The Application uses third-party service providers that may collect information used to identify you:

Google Play Services & Firebase: Google Privacy Policy
Google OAuth 2.0 Identity Platform: Google Terms of Service

6. Data Security & Storage

We maintain administrative, technical, and physical safeguards to protect personal and business data:

Data Encryption in Transit: All data transmitted between POS Pintar, Google OAuth servers, and our backends is encrypted using HTTPS / TLS 1.2+ protocols.
Data Encryption at Rest: Sensitive user data and authentication tokens stored in database systems are protected with industry-standard encryption (AES-256).
Access Control: Access to store records and databases is strictly limited to authorized systems and essential support personnel.

7. Data Retention & Account Deletion Policy

A. Data Retention

We retain your account and transaction data for as long as your account remains active or as required to provide you with the point-of-sale services.

B. Account & Data Deletion

In compliance with Google Play User Data policies, you have full control to delete your account and all associated personal and store data:

Email Deletion Request: Contact us directly at potensikuid@gmail.com with the subject line “Account Deletion Request”.
Revoking Google OAuth Access: You can revoke POS Pintar permissions at any time via your Google Account Security Settings.

Upon receiving a valid deletion request, all personal information, store inventory, sales history, and OAuth tokens will be permanently deleted from active databases within 30 days.

8. Children’s Privacy

POS Pintar: Kasir Warung is designed for business owners, merchants, and entrepreneurs. It is not intended for use by children under the age of 13. We do not knowingly collect personal data from children. If you learn that a child has provided us with personal data, please contact potensikuid@gmail.com immediately for prompt removal.

9. Contact Information

For privacy questions, data requests, or concerns regarding POS Pintar: Kasir Warung, please contact:

Developer Name: Potensiku Indonesia
Application: POS Pintar: Kasir Warung (com.aplikasi.kasir.pos.pintar)
Support Email: potensikuid@gmail.com
Phone: +62 889-0889-5826
Physical Address: Kota Bandung, Jawa Barat 40291, Indonesia