Privacy Policy

1. Introduction

Welcome to Suki ("we," "our," or "us"). This Privacy Policy explains how MONOSPHERE SOFTWARE DEVELOPMENT SERVICES collects, uses, discloses, and safeguards your information when you use our Suki POS mobile application (for merchants) and Suki Perks mobile application (for customers), collectively referred to as "the Apps."

By using our Apps, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not use the Apps.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Display name
• Password (stored securely using industry-standard hashing)
• Authentication tokens

2.2 Business Information (POS App)

For merchants using Suki POS, we collect:

• Business name and industry type
• Business address and contact information
• Tax identification and tax settings
• Currency and timezone preferences

2.3 Store Information

For each store registered in the system:

• Store name, address, and phone number
• Geographic location (latitude/longitude) for store locator features
• Operating hours
• Payment method configurations

2.4 Team and Staff Data

For team management features:

• Staff names and email addresses
• Role assignments and permissions
• PIN codes for point-of-sale access (stored using bcrypt hashing)

2.5 Customer Data (Perks Program)

For customers participating in loyalty programs:

• Email address and/or phone number
• Display name
• Points balance and transaction history
• Stores you have earned points at

2.6 Transaction Data

When transactions are processed:

• Transaction amounts and timestamps
• Items purchased
• Payment methods used
• Discounts and promotions applied
• Perks points earned or redeemed

2.7 Camera Access

With your permission, Suki POS uses your device's camera to:

• Scan product barcodes and QR codes at the point of sale
• Capture product images for your store catalog

Camera data is processed locally on your device for barcode scanning. Product images you capture are uploaded to your store's secure storage. We do not access your camera without your explicit permission, and you can revoke camera access at any time through your device settings.

2.8 Device Information

We automatically collect:

• Device model and manufacturer
• Operating system version
• App version
• Device identifiers for push notifications

2.9 Location Data

With your permission, we collect location data to enable features such as finding nearby stores in the Perks app and setting store locations in the POS app. You can disable location access in your device settings at any time.

2.10 Activity Logs

For security and audit purposes, we log significant actions within the Apps, including settings changes, team management activities, and authorization events. These logs are automatically deleted after one year.

3. How We Use Your Information

We use the collected information to:

• Provide, operate, and maintain the Apps
• Process transactions and manage loyalty programs
• Send transactional notifications (receipts, point updates)
• Authenticate users and secure accounts
• Enable team collaboration and management features
• Provide customer support
• Analyze usage patterns to improve our services
• Comply with legal obligations

4. Data Sharing and Third-Party Services

We use the following third-party services to operate our Apps:

4.1 Firebase (Google)

We use Firebase for authentication, database storage, cloud functions, analytics, and push notifications. Firebase is operated by Google and is subject to Google's Privacy Policy.

4.2 Email Service Provider

We use email services to send transactional emails such as receipts, team invitations, and password reset emails.

We do not sell your personal information to third parties. We may share information with law enforcement or other parties when required by law or to protect our rights.

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit using HTTPS/TLS
• Secure password and PIN storage using industry-standard hashing (bcrypt)
• Multi-tenant data isolation ensuring your business data is separate from others
• Firebase Authentication for secure user verification
• Device integrity verification using Firebase App Check
• Progressive lockout protection against unauthorized access attempts

6. Data Retention

We retain your data as follows:

• Account data: Retained until you request deletion of your account
• Activity logs: Automatically deleted after one year
• Device tokens: Automatically removed after 90 days of inactivity
• Transaction data: Retained for legal and accounting purposes as required by applicable law

7. Your Rights and Choices

You have the following rights regarding your data:

7.1 Access and Portability

You may request a copy of your personal data by contacting us at the email address below.

7.2 Correction

You can update most of your information directly within the Apps. For information you cannot update directly, please contact us.

7.3 Deletion

You may request deletion of your account and associated data by emailing us. Please note that some data may be retained as required by law or for legitimate business purposes.

7.4 Notification Preferences

You can manage your notification preferences within the Apps, including enabling quiet hours and opting out of specific notification categories.

7.5 Location Services

You can disable location access through your device settings at any time.

8. Children's Privacy

Our Apps are not intended for children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using our Apps, you consent to such transfers.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

MONOSPHERE SOFTWARE DEVELOPMENT SERVICES
Email: hi@sukipos.com