Privacy Policy — Durevo mobile app

What we store

Your account. Your name, and the email address or phone number you sign in with. If you sign in with a PIN, we store only a one-way bcrypt hash of it — the PIN itself is never stored, and no part of the system can return it. We also record which shops you belong to and the date your account was created.

Your shop's records. The things you enter to run the shop: items and their prices, stock counts, sales, expenses, personal income, budgets, staff attendance, cash-drawer sessions, and photographs you attach to items. Also your shop's own profile — its name, logo, address, contact details and currency — which appear on the receipts you issue.

Your customers. If you record a customer against a sale, we store the name and phone number you enter. That information is yours, not ours: you decide what to record and we hold it on your behalf. You are responsible for telling your own customers what you keep about them.

Notifications. A device token, stored only if you turn notifications on, and deleted when you sign out.

What we do not do

The app contains no analytics, no advertising, no attribution and no crash-reporting service. Nothing tracks how you use it, and nothing about your shop is sent anywhere except the Durevo service itself.

We do not sell your information, we do not share it with advertisers, and we do not use your shop's trading data for any purpose other than providing the app to you.

What the app asks permission for

Camera — to scan product barcodes when you add items to your inventory. Photos — so you can attach a picture to an item. Bluetooth — to send receipts to a thermal printer. Bluetooth is declared so that it is never used to work out your location. Notifications — only if you enable them.

Each permission is asked for at the moment it is needed, and the app works without any of them.

Where it is kept

On Google Firebase, in Google's africa-south1 region in South Africa. Google processes this information on our instructions and for no purpose of its own. Firebase provides sign-in, the database, file storage for item photographs, and the delivery of notifications.

We keep your shop's records for as long as the account is open, because a shop's books lose their value the moment they have gaps.

Who can see it

Only the people you invite to your shop, and only as much as the role you give them allows.

This is enforced rather than promised. The database refuses every direct read and write from any app or device outright — there is no path that reads it directly. Every request instead passes through our own server code, which checks that the person asking is a member of that shop and holds the permission the action requires, on every single request. A stolen phone or a modified copy of the app cannot reach another shop's data, because the database will not answer either of them.

Closing your account

You can ask us to close your account at any time — see Delete your account for how, and for exactly what is removed and what is kept.

In short: your personal details are removed, and the shop's trading records are kept. Each sale records which member made it, so deleting those entries would leave the owner's takings and stock counts wrong for every period the account was active.

Children

Durevo is a tool for running a business and is not intended for children. We do not knowingly collect information from anyone under 18.

Changes

If we change how the app handles your information, we will update this page and change the date below. Where a change is significant, we will tell you in the app rather than relying on you to re-read this.

Contact

Questions about this policy, or about what we hold, go to support@durevoapp.co.zw.