Privacy Policy
This policy describes how Box POS (“we”, “us”) collects and uses information when you use Box Cashier Lite, Box Waiter, and related cloud services.
1. Information we collect
- Account & license data — email (if you sign in), subscription status, plan tier, and device identifiers used for licensing and trial abuse prevention.
- Business data you enter — menu items, orders, shifts, customers, and reports stored locally on your device and optionally synced to our cloud backend (Supabase) when you enable cloud sync on a paid plan.
- Device information — Android device ID, app version, and network addresses used for LAN pairing between Cashier and Waiter devices on your local network.
- Payment data — subscriptions are processed by Google Play; we receive purchase tokens and subscription status, not your full card details.
- Diagnostics — optional crash reports if you enable a crash reporting SDK in a given build.
2. How we use information
- Provide POS features, cloud backup/sync, and companion Waiter pairing.
- Verify subscriptions and enforce plan limits (devices, Waiter companions, features).
- Prevent fraud, trial abuse, and unauthorized use.
- Respond to support requests and legal obligations.
3. Local-first design
Cashier Lite operates primarily on your device. Sales continue offline. Cloud sync is optional and sends only the business data needed for backup and multi-device use. LAN traffic between Cashier and Waiter stays on your local network unless you configure otherwise.
4. Sharing
We do not sell your personal data. We share data only with:
- Infrastructure providers (e.g. Supabase, Google Play) as needed to run the service.
- Legal requirements when required by law or to protect rights and safety.
5. Retention & deletion
Local data remains on your device until you uninstall the app or use in-app reset/delete tools. Cloud data linked to your account can be deleted via Settings → Delete account in Cashier Lite, which invokes our account deletion pipeline.
6. Security
We use encryption in transit (HTTPS/TLS), access controls, and device-bound licensing. You are responsible for securing devices, PINs, and LAN tokens on your network.
7. Children
Our apps are business tools not directed at children under 13.
8. International transfers
Data may be processed in countries where our providers operate. By using the service you consent to such processing subject to applicable law.
9. Your choices
- Disable cloud sync to keep data local-only.
- Cancel subscriptions in Google Play.
- Delete your account from the app.
10. Changes
We may update this policy. The “Effective” date above will change when we do.
11. Contact
Privacy questions: privacy@boxpos.app