Privacy Policy

1. Who we are

OwóBook is run by OrbisLabs Ltd ("we", "us"). We decide how the account and shop data described in this policy is used. You can reach us at Ibn.abdulwahabu@gmail.com.

We have not appointed a representative in the EU or the UK. You can contact us directly at the email above, wherever you live.

2. Information we collect

From you, the shop owner

• Your account: your email address and a password; or your Google account if you choose Google sign-in; or your Apple account if you choose Sign in with Apple (Apple may give us a private relay email instead of your real one). We never see or store your password ourselves; Firebase Authentication handles it. Your account also has a unique ID that links it to your shop.
• Your shop: business name, phone number, an optional logo photo, bank account number, bank name and account name (which defaults to your business name), your invoice counter, when the shop was created, and your answers to the shop setup questions.
• Your item catalog: each item's name, barcode (scanned or typed), price and, if you enter it, its cost.
• Your stock and suppliers (Premium): stock levels, stock movements and stock you receive, and the suppliers you add.
• Your invoices: invoice number; the customer's name and phone number; each line (item name, code, quantity, unit price); subtotal, discount, tax and total; whether it was paid now, part paid or on credit; payments logged against it; due date; and the dates it was created and paid.
• Your staff (Premium): the staff you invite, the role you give each person (Seller, Stock keeper, Accountant or Manager), the status of each invite, and changes to roles.

About your customers

You type in your customers' names and phone numbers, or pick them from your phone's contacts (only the contact you choose). Your customers do not use OwóBook, have no account, and we do not contact them or use their details for advertising.

You are responsible for having the right to keep your customers' details in OwóBook and to send them receipts. For example, you should tell your customers you record their name and phone number, and only record what you need. We store this information for you so you can run your shop.

If you're a staff member

A shop owner invited you. We store your account details and your role in that shop. What you add or change in the shop is saved to the shop's data, which the owner controls.

Collected automatically by services inside the app

Some services OwóBook uses collect technical data when the app runs (see Section 4):

• Crash reports: when the app crashes, Firebase Crashlytics records what went wrong, your device model, operating system and app version, linked to your user ID so we can fix problems on your account.
• Notifications: Firebase Cloud Messaging and Firebase Installations give your device a token and an installation ID so we can send you notifications.
• Ads: advertising and device information (Section 5).
• Other: your IP address and an installation identifier for Firebase, device and performance information for barcode scanning, and your IP address when the app downloads fonts.

OwóBook does not ask for your location, although advertising services may estimate your general location from your IP address.

Stored on your phone

To work smoothly, the app keeps a cached copy of your shop data on your device and schedules reminder notifications there. When you save an image or PDF to share, the app also writes it to your device's temporary storage first. That file can include your customer's name and phone number and your bank details. It stays there until your phone clears it or you uninstall the app.

3. How we use your information

• To run your account and the app: sign you in, save and show your invoices, customers, items, stock and ledger, and build the receipts and statements you share.
• To let your staff work in your shop, according to the roles you give them.
• To send notifications: new sign-in alerts, staff invites and changes, and low stock. Payment reminders are scheduled on your phone.
• To find and fix crashes.
• To provide Premium and check your subscription.
• To show ads in the free version (Section 5).
• To keep the service secure and prevent abuse.
• To answer you when you contact us for support or make a request.
• To meet our legal obligations.

We don't send your shop data to advertisers. The app doesn't pass any of your shop, customer or invoice information into ad requests.

We may technically be able to access the database that stores your data, because we administer it. We only open a user's shop data to provide support you ask for, or when the law requires it.

The legal reasons we rely on for each use are in Section 11.

4. Third-party services

These services run inside the app. Each handles data under its own privacy policy.

We don't control how these providers use data beyond what we configure. Please read their policies for details.

5. Ads and your choices

The free version of OwóBook is supported by ads from Google AdMob. Premium has no ads. In the free version you will see:

• banner ads at the bottom of several screens;
• full-screen ads at natural pauses, such as after you send or save a receipt or statement, mark an invoice paid, or leave a receipt. These appear at least three minutes apart;
• an ad when you return to the app after leaving it.

Ads may be personalized using your device's advertising ID.

• Where consent is required (currently the EEA, the UK and some US states, as decided by Google's consent tool), the app shows Google's consent message first and does not request any ad until you have made your choice. You can change it later under Shop → Ad privacy settings, which appears where it applies.
• Elsewhere, the app does not show a consent message. You can control personalization on your device. On Android, go to Settings → Google → Ads to opt out of personalization or delete your advertising ID. On iPhone, go to Settings → Privacy & Security → Tracking.
• iPhone: OwóBook shows Apple's App Tracking Transparency prompt. If you choose "Ask App Not to Track", ads on iPhone are served without your advertising identifier. You can change this any time in Settings → Privacy & Security → Tracking.

You can also visit adssettings.google.com to manage how Google personalizes ads.

6. Permissions and why we ask

• Camera: to scan item barcodes when you add an item and when you add items to an invoice. The app reads only the barcode number; it does not save or upload camera images.
• Photos: to let you choose a shop logo. Only the one photo you pick is used, and it is uploaded to your shop's storage.
• Contacts: only when you tap Choose from contacts while adding a customer. The app opens your phone's contact picker and copies the name and phone number of the contact you choose into the form. Nothing is saved to OwóBook unless you save the customer.
• Notifications: to alert you to new sign-ins, staff invites and changes, low stock, and the payment reminders you set.
• Bluetooth (Premium): to find and connect to a receipt printer you choose. On Android this may appear as "Nearby devices".
• Internet: to sign you in and save and load your data.

You can turn any permission off in your phone's settings. You can still type items and customers by hand.

7. Sharing and disclosure

When you share, you decide. Data leaves the app to a customer, a printer or another app only when you tap one of these:

• Send by WhatsApp, Telegram, Viber, LINE or SMS: opens a message in the app you choose with your shop name, receipt number, date, items, total and your bank details. The customer's phone number is used to open their chat.
• Send as image: creates a picture of the receipt (shop name, phone, logo, customer name and phone, items, total and bank details) and opens your phone's share sheet.
• Send as PDF or export a statement: creates a PDF (shop name, customer name and phone, invoice list, totals) and opens the share sheet.
• Print by Bluetooth (Premium): sends the receipt from your phone to the printer you connected.

After you share, the app you chose handles the data under its own policy, and we cannot take it back.

Inside your shop. With Premium, staff you invite can see and change shop data according to their role. The shop owner decides who is invited and can change or remove their access.

We also share data only with:

• The service providers in Section 4, to run the app.
• Apple, Google and RevenueCat, to bill and manage Premium.
• Authorities, if the law, a court or a valid government request requires it.
• A successor, if OwóBook is sold or merged. We will tell you about any change in who holds your data.

We do not sell your personal information. OwóBook users outside your shop cannot see your shop, customers, items or invoices. One exception: your shop logo is not private. Other signed-in OwóBook users can technically read logo files, and the logo appears on receipts you share.

8. How long we keep your data

• While your account exists, we keep your data so the app works. You can delete an item in the app. Customers and invoices stay until you delete your whole account or ask us to remove them.
• If you delete your account, the app immediately deletes your invoices, customers, items, stock, logo, shop details, account record and sign-in account (see how to delete your account).
• Crash reports are kept by Firebase Crashlytics for a limited time under Google's retention rules.
• Subscription records are kept by Apple, Google and RevenueCat under their own policies, including after you delete your account.
• Inactive accounts are not deleted automatically at the moment. You can delete yours at any time.
• On your phone, uninstalling the app removes its local data.
• Anything you already sent by message, image or PDF stays with the people and apps that received it.

9. Security

• Data moves between the app and Google's servers over encrypted connections (HTTPS/TLS).
• Google Cloud encrypts data it stores by default.
• Access rules on the database allow only the shop owner, and staff they invited within their role, to read or change the shop's customers, items, stock and invoices.
• We send an alert when your account signs in on a new device.
• Deleting your account needs you to confirm it is you, with your password, your Google account or your Apple account.

No system is 100% secure. Please keep your phone and password safe, and put on receipts only the bank details you are happy to share.

10. International transfers

Your data is stored with Google Firebase. Your shop data is stored in Cloud Firestore in the United States. [TO CONFIRM: Cloud Storage bucket location]

Google, RevenueCat and the advertising and scanning services may also process data in other countries, including the United States, so your data may leave the country you live in. Where the law requires safeguards for this, such as the EU and UK Standard Contractual Clauses, we rely on those the providers include in their terms.

11. Your rights wherever you are

Wherever you live, you can ask us to access, correct, delete or export your data, and you can withdraw consent you gave. We make no decisions about you by automated means alone.

• Correct: you can edit your bank details, customers and items in the app. To correct your business name, phone number or logo, email us.
• Delete: use Shop → Delete account, or email us if you cannot sign in.
• Withdraw consent: change ad choices as described in Section 5, and turn off camera, photos, contacts, notifications or Bluetooth in your phone's settings.
• Access or a copy: email us from the address on your account. We may ask you for details to confirm it is you, and we will reply within 30 days, or sooner if your local law requires.

Depending on where you live, these laws give you further rights:

Legal bases (GDPR, UK GDPR and similar laws)

If you are a shop's customer and want to see, correct or delete details a shop owner entered, please ask the shop first. You can also email us and we will help.

How to complain

Please contact us first so we can try to fix it. You can also complain to the data protection authority where you live, for example:

• EEA: your national authority (list of EU authorities)
• UK: Information Commissioner's Office (ico.org.uk)
• California: California Privacy Protection Agency (cppa.ca.gov)
• Brazil: Autoridade Nacional de Proteção de Dados (gov.br/anpd)
• India: Data Protection Board of India
• Nigeria: Nigeria Data Protection Commission (ndpc.gov.ng)

12. Children

OwóBook is for adults who run a business. It is not for anyone under 18 and is not directed at children. If we learn that an account belongs to a child, we will delete it. If you think that has happened, email Ibn.abdulwahabu@gmail.com.

13. This website

This website uses no cookies or analytics.

14. Changes to this policy

We may update this policy. We will change the "Last updated" date above and, for significant changes, tell you in the app or on the store listing.