👋 Introduction
Welcome to Zoomtu Business — a shop management application that helps local business owners register their shops, manage products and inventory, record sales, manage customers, and grow their local business.
This Privacy Policy explains what information we collect, how we use it, with whom we share it, and what rights you have. By using Zoomtu Business, you agree to the practices described here.
We do not sell your personal information. We only collect what is necessary to run the app and provide you with the best possible service.
📋 Information We Collect
2.1 Information You Provide Directly
- Account: Created through Google Sign-In — we receive your Google account name, email address, Google user ID, and profile picture URL. We do not store a password (authentication is handled by Google)
- Shop Profile: Shop name, description, WhatsApp / contact number, city, street address, shop location (GPS — one-time or on update), business hours, shop photos
- Products: Name, category, brand, description, SKU, barcode, pricing, images, specifications, stock quantities
- Customers: Customer name, phone number, address (optional), notes (optional), credit/Udhar records
- Sales: Products sold, quantities, prices, date/time, payment status, remarks
2.2 Collected Automatically
- Device info: Platform (Android/iOS), device model, OS version, and Firebase Cloud Messaging token for push notifications
- Crash & diagnostic data: If the app crashes, Firebase Crashlytics automatically collects an anonymous crash report containing the stack trace, device model, OS version, and app version. This is used solely to identify and fix bugs. We tag reports with your shop ID so we can correlate crashes to specific accounts when needed for support
- App preferences: Theme (light/dark) and language — stored only on your device
- Recent searches: Up to 10 recent shop search terms — stored only on your device
2.3 From Device Sensors
- Location: Collected only during shop registration, when you update your shop location, or when you use nearby shop search (temporary — not stored after the search)
- Camera: Used for barcode scanning and product/shop photos. Raw camera frames are never stored or transmitted
- Photos / Gallery: Used when you pick existing photos from your device for your shop profile or product listings. We only access the specific images you select; we never scan or upload your full photo library
- Microphone (iOS only): Used for optional voice price input on iOS devices. Audio is processed locally on the device — we never receive or store recordings. This feature is not available on Android
⚙️ How We Use Your Information
| Purpose | Data Used |
|---|---|
| Create and manage your account | Google account name, email, Google user ID |
| Register and display your shop | Shop profile, location, photos, hours |
| Manage your product catalog | Product details, images, barcodes |
| Record and track sales | Sales data, customer data, transaction records |
| Manage customer credit (Udhar) | Customer profiles, payment ledger |
| Manage stock and inventory | Product quantities, adjustment records |
| Send push notifications | FCM device token |
| Enable nearby shop discovery | Location coordinates (temporary) |
| Barcode and QR scanning | Camera input, barcode data |
| Voice-based price input | Microphone (local processing only) |
| Generate PDF invoices | Sale and customer data |
| Manage subscriptions | Subscription status and plan details |
| Diagnose crashes & fix bugs | Crash reports, stack traces, device model, OS version |
| Schedule local reminders | Credit/Udhar due dates, daily summary times |
🤝 Sharing & Disclosure
4.1 Third-Party Service Providers
| Service | Provider | Purpose | Data Shared |
|---|---|---|---|
| Push Notifications | Firebase Cloud Messaging (Google) | Delivering notifications | FCM device token |
| Crash Reporting | Firebase Crashlytics (Google) | Diagnosing crashes & bugs | Crash logs, stack traces, device model, OS version, app version, shop ID (for correlation) |
| Maps | Google Maps | Shop location display, nearby search | Shop GPS coordinates, device location (search only), device IP |
| Sign-In | Google Sign-In | Required — sole authentication method | Google name, email, Google user ID, profile picture URL |
| Fonts | Google Fonts | App typography | Device IP address (standard for any web/CDN font request) |
4.2 Public Shop Information
The following is visible to other Zoomtu users: shop name, description, map location, business hours, photos, product listings, and follower count.
4.3 Legal Requirements
We may disclose your information when required by law, court order, or to protect the rights, property, or safety of Zoomtu, our users, or the public.
We never sell your personal data to advertisers, data brokers, or any third parties.
🛡️ Storage & Security
On Your Device
- Authentication tokens — stored in Android Keystore / iOS Keychain (encrypted by the OS)
- App preferences — theme and language (SharedPreferences)
- Recent searches — up to 10 shop search terms (local only)
- Offline queue — pending entries created without connectivity, auto-synced when you reconnect
- Cached images — product and shop photos cached for faster display
On Our Servers
All other data (account, shop profile, products, customers, sales) is stored on our backend servers using HTTPS (TLS) encryption for all data in transit. Crash reports are stored on Google's Firebase servers and accessible only by the Zoomtu engineering team.
Security Measures
- Tokens stored in encrypted OS-level secure storage
- All API communication uses Bearer token authentication
- Authentication delegated to Google Sign-In — we never see or store your password
- Tokens invalidated and removed from device on logout
- FCM device token deregistered from our servers on logout
🗓️ Data Retention
| Data Type | Retained Until |
|---|---|
| Account data | Account deletion |
| Shop profile and products | Shop deletion |
| Sales and customer records | You delete them, or account deletion |
| FCM device token | Logout or app uninstall |
| Offline operation queue (local) | Successfully synced or app data cleared |
| Recent searches (local) | App uninstall or manual clear |
| Temporary invoice PDFs | After share/print dialog is closed |
| Crash reports (Firebase Crashlytics) | Automatically deleted after 90 days by Firebase |
| Cached product/shop images | Cleared when you clear app cache or uninstall |
✅ Your Rights & Choices
- Access — View your account and shop information within the app at any time
- Correction — Update your profile, shop details, products, and customer records at any time
- Deletion — Delete individual records, your shop, or request full account deletion
- Location — Revoke location permission from device settings; disables nearby search and map features only
- Camera — Revoke camera permission; disables barcode scanning and photo upload only
- Microphone — Revoke microphone permission; disables voice price input only
- Notifications — Disable from device settings or within the app at any time
- Data Export / Deletion — Contact us to request a copy of your data or permanent account deletion
Request Data Export or Deletion
support@zoomtu.com🔐 App Permissions
Revoking any optional permission disables only that specific feature — the rest of the app continues to work normally.
👶 Children's Privacy
Zoomtu Business is intended for use by business owners and is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13.
If you believe a child has provided us with personal data, please contact us at support@zoomtu.com and we will delete it promptly.
💳 Future Payment Processing
Zoomtu Business currently does not process financial payments within the app. We plan to integrate payment APIs in a future update to allow businesses to collect payments digitally.
When payment processing is introduced:
- An updated Privacy Policy will be published and you will be notified
- Payment processing will be handled by a certified third-party payment provider
- We will not store full card numbers or banking credentials on our servers
- All payment data will comply with applicable financial regulations (PCI-DSS)
📢 Policy Changes
We may update this Privacy Policy from time to time. When we do:
- The "Last Updated" date at the top of this page will be revised
- Significant changes will be communicated via in-app or push notification
- Continued use of the app after changes are posted means you accept the updated policy
📬 Contact Us
If you have any questions, concerns, or requests about this Privacy Policy or your personal data, we're here to help.
Zoomtu Business — Privacy Team
support@zoomtu.comThis Privacy Policy was prepared based on the actual data collection and processing practices of Zoomtu Business.