Privacy Policy

When you buy a licence we collect: your shop name, a contact mobile number, and an email if you give us one. That is everything we ask you for directly.

On activation your device sends a hardware fingerprint: identifiers of the board, processor, disk and operating system. It is used to bind the licence to your machine and to stop the free trial repeating on the same device. It is used for nothing else and shared with nobody.

When cloud sync is on, your business data is uploaded: items, invoices, customers, staff and settings. This is your data; we hold it so you can get it back.

The website uses no advertising trackers and no analytics cookies. The only cookie is the session cookie set when you sign in to the dashboard or your store portal.

The MSAD POS Android app is a companion app: it shows you your shop figures. It does not sell and it writes nothing back. You sign in with your licence key and your store portal password.

What it collects at sign-in: your licence key, your device model and OS as the device itself reports them, the IP address you signed in from, and when it was last used. The purpose is one thing: running the session and letting you see and end your own signed-in devices. The session token is stored on our side hashed, never in plain text.

The app requests no sensitive permission: no location, no camera, no contacts, no photos or files. Its only permission is internet access.

The app contains no tracking tools, no advertising and no analytics, and shares nothing with any third party.

The last data you loaded is kept on your phone so the app works offline. That copy lives on your own device, and it is wiped entirely the moment you sign out or uninstall the app.

Your customers' names and numbers appear to you in the app because they are your own data about your customers — you entered them in the till software and you are responsible for them. The app only displays them to you; it does not collect them from you.

Our servers are hosted with ZAP-Hosting GmbH in Aachen, Germany. This means your cloud-synced business data is stored inside the European Union, not inside Saudi Arabia.

We state this plainly because it may matter to you: if your business is under an obligation to keep data inside the Kingdom, cloud sync is not for you — the program works fully without it, and the local encrypted backup is enough.

The connection between us and your device is always TLS-encrypted, and the database on your machine is encrypted with a key protected by Windows encryption.

Our support team can view your store data from the dashboard for technical support only, and every access is written to an audit log.

We do not sell, rent or share your data with third parties for marketing. We do not use your data to train any model.

We may disclose data if compelled by a court order or a competent authority, and we will tell you unless the law forbids it.

We keep your data while your licence stands. We do not delete a store's data automatically even if it stops being used — a merchant may come back a year later and ask for it.

You can request permanent deletion of your cloud data at any time by contacting us. We carry it out within 7 business days and confirm it to you. Deleting from the cloud does not touch the copy on your device.

You can also export your data at any time: items to Excel, invoices to PDF, and a full encrypted copy from Settings.

If we change something material — where data is stored, or what we collect — we notify customers by message before it takes effect. We do not simply edit the page quietly.