Welcome to ScanTally. Your privacy and the security of your business data are our top priorities. This Privacy Policy explains how ScanTally (developed by Alticrux) handles your information when you use our Point of Sale (POS) and inventory management web application.

1. Information We Collect

To provide our services, we collect minimal, strictly necessary information:

• Account Information: When you sign up, we collect your email address via Google Firebase Authentication to secure your account.
• Business Data: Product names, prices, hidden costs, QR code data, and billing history that you manually input into the app.

2. How Your Data is Stored & Secured

We use a "Zero-Knowledge" architecture for your sensitive data:

• AES Encryption: Your hidden profit margins and minimum prices are encrypted directly on your device using AES encryption before being embedded into QR codes. The decryption key is unique to your account and is never stored in plain text.
• Isolated Database: Your business data is stored in a private, isolated sub-collection in Google Firestore under your unique User ID. Even if our database were compromised, your data would remain encrypted and unreadable without your specific device key.
• Offline Storage: ScanTally is a Progressive Web App (PWA). Some data is cached locally on your device using IndexedDB to allow offline scanning. This data never leaves your physical device.

3. No Admin Tracking or Data Selling

We do not spy on you. There is no backend dashboard for the ScanTally developers to view your sales, scan your QR codes, or monitor your inventory. Furthermore, we do not sell, rent, or share your personal or business data with any third-party advertisers or analytics companies.

4. Third-Party Services

ScanTally relies on the following trusted third-party services to function:

• Google Firebase: Used for secure user authentication (Login/Signup) and cloud database hosting. Firebase adheres to strict enterprise-grade security and privacy standards.
• Netlify: Used for secure web hosting and SSL encryption.
• Google Analytics: Used to understand anonymous traffic patterns (page views, device types). No personally identifiable business data is ever sent to analytics.

5. Data Deletion & Your Rights

You have complete control over your data. You can permanently delete your scan history at any time using the "Clear All History" feature inside the app. If you wish to delete your account entirely, you can do so via your device's app settings, or contact us, and we will ensure your Firebase authentication record is removed.

6. Children's Privacy

ScanTally is a business tool and is not intended for use by children under the age of 13. We do not knowingly collect personal information from children.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last Updated" date. Continued use of the app after changes constitutes your acceptance of the revised policy.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our security practices, please reach out:

Developer: Alticrux (Aditya Bhagat)
Website: scantally.netlify.app
Contact Page: Contact Us