Privacy Policy
Last updated: September 2026
1. Introduction
BlueTrack POS ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our point-of-sale application and related services.
2. Information We Collect
We may collect the following types of information:
- Account Information: Name, email address, and employee credentials when you create an account or are added as an employee.
- Transaction Data: Sales records, payment information, and receipt data processed through the application.
- Device Information: Device identifiers, operating system, and app version for registered POS devices.
- Usage Data: Information about how you interact with the application, including login times and feature usage.
- Photos You Attach: Images attached to a deposit, purchase, expense, or payment-QR setting are stored with the record they belong to. The mobile app asks for photo-library access only when you choose to attach an image, and reads only the image you pick.
- Bluetooth: The mobile app uses Bluetooth to find and connect to receipt printers. It is used for printing only — no location is derived from it, and no Bluetooth data leaves the device.
- Crash and Error Reports: When the app crashes or hits an error it sends a diagnostic report, which may include a stack trace, the app version, the device model, and the account identifier signed in at the time.
We do not collect location data, contacts, calendars, health data, or browsing activity, we do not track you across other companies' apps or websites, and the application shows no advertising.
3. How We Use Your Information
We use the collected information to:
- Provide and maintain the POS service
- Process transactions and generate receipts
- Authenticate users and secure access to the system
- Generate business reports and analytics for venue operators
- Improve and optimize the application
- Communicate service updates and support
4. Data Sharing and Disclosure
We do not sell your personal information. We may share information only in the following circumstances:
- With Your Employer: Venue operators have access to employee and transaction data for their venues.
- Service Providers: Google Cloud (hosting and database storage), Sentry (crash and error reporting), and Apple and Google (app distribution and push notification delivery).
- Legal Requirements: When required by law or to protect our rights.
5. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit and at rest
- Secure authentication using hashed credentials
- Role-based access controls
- Regular security assessments
- Isolation of each venue's data from every other venue's at the database level
Credentials held on a device are kept in the platform's secure store — the iOS Keychain or the Android Keystore — not in ordinary application files. Sales and records are kept on the BlueTrack server, not in a database on the device. The device's own passcode and encryption protect what it holds while it is signed in, and every device should require a passcode.
6. Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations. Transaction records are retained according to applicable tax and business regulations. Crash and error reports are kept for a limited diagnostic window and then deleted. When an account is closed, its data is deleted or anonymised within 90 days unless an export has been requested or the law requires it be kept longer.
7. Your Rights
Depending on your location, you may have rights regarding your personal data, including:
- Access to your personal information
- Correction of inaccurate data
- Deletion of your data (subject to legal retention requirements)
- Data portability
To exercise these rights, please contact your venue administrator or reach out to us directly.
8. Children's Privacy
Our service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this policy.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at: