Privacy Policy

Last updated: October 2026

This Privacy Policy applies to the Yumri POS mobile application ("Application", "we", "us") for Android and iOS, created by Yumri Tech ("Service Provider"). It explains what data the Application accesses, how it's used, and — since the Application integrates with Google Sheets and Google Drive — exactly what Google user data is involved and why.

1. Local-First Data Storage

Yumri POS is built offline-first. Your products, transactions, users, and settings are stored in a local database on your device. This data is not transmitted to or stored on Yumri Tech's servers — we do not operate a backend that receives your store data. You can delete all local data at any time by clearing the app's storage or uninstalling the Application.

2. Data Protection Mechanisms

We apply the following measures to protect your data:

Encryption in transit — all network communication, including calls to Google's APIs and our subscription-verification provider (RevenueCat), uses HTTPS/TLS encryption. The Application does not send or receive data over unencrypted (cleartext) connections.
Local device protection — your business data is stored in the Application's private, sandboxed storage area, isolated from other apps by your device's operating system. Access within the app is additionally gated behind a PIN you set.
Google account credentials — if you connect Google Sheets, your Google access tokens are stored in that same protected local storage and are never transmitted to Yumri Tech's own servers, because we do not operate any servers that receive this data.
No third-party data sharing — we do not sell, rent, or share your data with third parties, and we do not use it for advertising or to train AI/ML models.

3. Device Permissions

Camera — used only for barcode scanning and capturing product photos. Images are stored locally on your device and are never uploaded anywhere by us.
Nearby devices / Bluetooth — used only to connect to a Bluetooth thermal receipt printer you select yourself in Settings. We do not scan for or collect data about other nearby devices beyond listing paired/discoverable printers for you to choose from.
File storage — used to export and import backup files that you explicitly create and control.
Notifications (optional) — used only if you enable it in Settings, to remind you about low stock, expiring products, and subscription renewal. These reminders are generated and scheduled entirely on your device; no server is involved in sending them.

4. Google Sheets & Google Drive Integration (Optional)

If you choose to tap "Connect Google Account" in Settings, Yumri POS requests permission to access Google Drive using two OAuth scopes, granted directly by you through Google's own sign-in and consent screen:

Google Drive API, file scope (.../auth/drive.file) — used to create a spreadsheet in your own Google Drive, and to read and update its contents with your sales, transaction, product, and stock data so you can view live reports from any browser. This scope is limited strictly to the single spreadsheet the Application itself creates — it does not grant access to any other file in your Google Drive.
Google Drive API, app data scope (.../auth/drive.appdata) — used to store a small marker in a private, hidden storage area of your Google Drive that only Yumri POS can access. This lets the app reconnect to the same spreadsheet if you reinstall it, instead of creating a duplicate. This area is invisible in your regular Drive and cannot be used to read, list, or access any of your other files.

This connection is entirely optional, initiated only when you tap Connect, and can be disconnected at any time from Settings. Data flows directly from your device to your own Google account using Google's APIs — Yumri Tech's servers never see, receive, or store this data. We do not use this data for advertising, profiling, or any purpose other than providing the reporting feature you requested. We do not sell or share Google user data with third parties, and we do not use it to train AI or machine learning models.

Disconnecting your account in Settings revokes the app's local session; you can additionally revoke Yumri POS's access entirely at any time via Google Account → Security → Third-party access.

Limited Use disclosure: Yumri POS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4a. "Ask Yumri" — Not an AI/ML Model

The in-app assistant ("Ask Yumri") is a local, rule-based feature — it matches what you type or say against a fixed set of business commands and questions, and answers by querying the app's own local database on your device. It is not an AI or machine-learning model, does not call any third-party AI/ML service, and does not transmit any data — including data from the optional Google Sheets integration — to any AI provider for any purpose, including training. These are two entirely separate, unrelated features.

5. In-App Purchases & Subscriptions

Premium subscriptions are processed by Google Play or the Apple App Store, and purchase verification is handled via RevenueCat. We receive confirmation that a purchase was made, but never see your payment card or billing details.

6. Analytics & Advertising

We do not use third-party analytics SDKs, advertising networks, or tracking services in the Application.

7. Data Retention & Deletion

Local app data is retained on your device for as long as you use the Application. Uninstalling the app removes it. If you've connected Google Sheets, the spreadsheet created in your Drive remains in your own Google account and is managed by you — you can delete it directly from Google Drive at any time.

8. Children's Privacy

Yumri POS is a business tool and is not directed at children. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through the Application, contact us using the details below and we will take appropriate action.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact Us

Questions about this Privacy Policy or your data? Email us at monfortemichaeljoe@gmail.com.