Privacy Policy

1. Introduction

KasWarung ("we", "our", or "us") operates the KasWarung management portal (app.kaswarung.com) and the KasWarung POS mobile application. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

2. Information We Collect

We collect the following types of information to provide and improve our services:

• Account Information — email address and display name
• Business Data — business name, address, logo, products, categories, pricing, inventory, purchase orders, supplier info, sales transactions, payment records, and customer data
• Employee Data — names, roles, and contact information of team members you add
• Device & Usage Data — device model, OS version, app crash logs, and anonymized feature usage analytics
• Camera Access — used solely for barcode scanning and product photo capture
• Bluetooth Access — used solely for connecting to receipt printers

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide and maintain core POS and retail management functionality
• Authenticate your identity and secure your account
• Synchronize business data between web portal and mobile app
• Generate business reports (sales, inventory, profit & loss)
• Send service notifications such as subscription reminders and updates
• Improve our services through anonymized usage analytics
• Provide customer support when you contact us

4. Data Storage & Security

All business data is stored securely in Supabase (cloud-hosted PostgreSQL). Data is encrypted in transit using TLS/HTTPS. Multi-tenant data isolation is enforced via Row-Level Security (RLS) policies — each business's data is strictly separated. Offline data on mobile devices is stored locally using encrypted SQLite. We do not sell, rent, or share your personal data with third parties for commercial purposes.

5. Third-Party Services

We use the following third-party services to operate our platform:

• Supabase — authentication, database, and file storage (supabase.com/privacy)
• Midtrans — subscription payment processing (midtrans.com/en/privacy-policy)

6. Data Retention & Deletion

Your data is retained as long as your account is active. You may request data deletion at any time.

• Upon account deletion, all personal and business data is permanently removed within 30 days
• Your business data is stored for 90 days after account suspension before permanent deletion
• Anonymized analytics data may be retained for service improvement purposes

7. Children's Privacy

Our services are not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

8. Your Rights

You have the right to: access your personal data stored in our services; export your business data via data export features; correct inaccurate personal information through the app settings; delete your account and all associated data by contacting us; and withdraw consent for data processing at any time. To exercise any of these rights, please contact us using the information below.

9. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us: