Privacy policy
Last updated : 11 November 2026
This policy explains what data Kasby collects, why, and your rights. It covers the mobile app, the web version and this website.
Contact
For any question about your data or this policy: contact@kasby.app.
Data we collect
- Account: your email address or phone number, your name, and a password if you sign in by email. A phone number is verified by an SMS code sent by Google Firebase.
- Business: name, address, tax number, logo, currency and settings.
- Business records you enter: products, prices, stock, purchases, sales, receipts, invoices, customers and what they owe, cheques, suppliers, cash and bank movements, staff and their roles, time-clock records, pay and payslips, delivery routes, customer places and vehicles.
- Photos and files you choose to add (products, logo, cheques, documents).
- Location: only when you tap to pin a customer or a place, never in the background, and it is not shared with other users.
- We do not collect your contacts, browsing history, advertising ID or payment card numbers, and the app contains no ads and no tracking tools.
Device permissions
- Camera: to scan barcodes and take photos you decide to save. Nothing is recorded without your action.
- Bluetooth and nearby devices: only to connect to receipt printers. No data about other devices is kept.
- Notifications: reminders (orders, payments due) scheduled on your phone; we do not send marketing notifications.
- Each permission is asked when you first use the feature, and can be turned off at any time in your phone’s settings.
Why we use it
- To run the app and keep your data in sync, also offline, across your devices and with your team.
- To sign you in and protect your account and your business’s data.
- To answer you when you contact support.
- To manage your subscription if you choose Premium.
Who can see your data
Your business’s data is visible only to the people you add to it, according to the role and permissions you give them.
We never sell your data and never use it for advertising.
Service providers
- Google Firebase / Google Cloud: sign-in (including SMS verification), database and file storage.
- RevenueCat, Google Play and the App Store: subscriptions, if you buy Premium (we never see your card).
- Cloudflare: hosting of this website.
- They process data only on our behalf and under confidentiality and security commitments. Their servers may be located outside your country.
Retention and deletion
Your data is kept while your account is active.
You can delete your account at any time in the app (your account page → “Delete my account”) or from the “Delete my account” page of this site. Your data is then permanently erased within 30 days, except what the law requires us to keep (such as subscription purchase records).
Your rights
Under applicable data protection laws, including the GDPR where it applies, you can access, correct, export, restrict or object to the processing of your data, or ask for its deletion, by writing to contact@kasby.app. You can also complain to your data protection authority.
Security
Encrypted connections (HTTPS/TLS), access rules per business and per role checked on our servers, and backups. No system is perfect: please report any problem to us.
Children
Kasby is meant for businesses and is not intended for children. It is not designed for people under 16.
Changes
We may update this policy, for example when the app gains a feature. The date at the top shows the latest version; important changes are announced in the app.