Privacy policy

Who we are

BME POS is a program by BME Digital ("we" in this policy). For any question about your data, write to support@bmedigitall.com.

In short

• Your shop data stays on your devices, unless you choose cloud mode.
• No ads, no tracking, no selling of data.
• We only receive what is needed to activate the program and fix its errors.

Data that stays on your device

In standalone mode, and on a phone linked to the computer, all shop data (products, sales, customers, accounts) stays on your devices. We have no access to it.

A linked phone connects directly to the shop computer on the local network; the connection is encrypted and does not go through our servers.

Cloud mode

If you choose cloud mode, the shop data is stored in Google Firebase so your devices stay in sync: products and their photos, sales, purchases, customers, suppliers, accounts and credit, sellers and settings. Your email and password are used to sign in; the password is handled by Firebase and we never see it.

We do not use this data for anything else, do not sell it, and do not show it to anyone.

Your customers' and suppliers' data

The names, phone numbers and addresses of your customers and suppliers are entered by the shop owner, who is responsible for them. We do not contact them or use their data. In cloud mode they are stored with the shop data as described above.

Activation and licensing

To activate the program and protect licenses, it sends the license server (on Cloudflare): the device code, the activation key or code, the license state, the program version, the operating system and the number of shops. This happens each time the program opens, then once every 24 hours.

The device code is derived from the device and carries no name or personal information. During the trial, its start date is recorded with that code.

Crash reports

If the program crashes, it sends a technical report to Firebase Crashlytics (Google): device model, system and program versions, and the time and place of the error in the code. The report contains no shop data and is deleted after 90 days at most. We use it only to fix errors.

Checking for updates

Once a day the program reads a small file from downloads.bmedigitall.com with the latest version number. No data about the shop or the device is sent with it.

Device permissions

• Camera: only to scan barcodes and QR codes.
• Bluetooth ("nearby devices"): only for receipt printers, without location.
• Fingerprint or face: checked by the device itself, never sent to us.
• Local network: to link phones to the computer and for printers.
• Files: when exporting or importing, only the file or folder you choose is opened.

Security

All internet connections are encrypted (HTTPS). The phone-to-computer connection is encrypted with the computer's fingerprint contained in the QR code, and no phone is accepted without the owner's approval.

How long we keep data

• Cloud mode data: as long as the account exists; deleted with it.
• License records and device code: during the license or trial, then one year after the account is deleted, to prevent fraud.
• Crash reports: 90 days at most.
• Data on your devices: until you delete it.

Children

The program is made for shop owners and businesses. It is not directed at anyone under 18, and we do not knowingly collect children's data.

Deleting data

• Standalone and linked modes: delete the shop and its data from the program at any time, or uninstall the program.
• Cloud mode: from the app (Settings → Shop settings → Delete cloud account), or without the app on the Delete account page.

What we do not do

No ads, no tracking, no selling or sharing of data for anyone else's use. Google (Firebase) and Cloudflare are service providers working only on our behalf.

Changes

If this policy changes, the date at the top of the page is updated.