RITE Labs ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the RITE POS mobile application and our associated services (collectively, the "Service").
By accessing or using the Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy.
1. Information We Collect
A. Personal Information You Provide to Us
We collect information that you voluntarily provide when you register for an account, subscribe to premium features, or interact with our customer support:
- Account Information: Name, email address, phone number, and password.
- Business Information: Shop name, business address, GSTIN (if provided), drug license numbers, and other vertical-specific profile data.
- Payment Information: We use RevenueCat and Google Play's billing infrastructure to handle subscriptions. We do not directly store your credit card numbers or payment details.
B. Data Processed on Behalf of Your Business
As a point-of-sale system, you may input data about your own customers and transactions:
- Customer Data: Customer names, phone numbers, addresses, credit balances (Khata), and purchase history.
- Transaction Data: Invoices, sales records, returns, and inventory levels.
Note: We act as a data processor for this information. You (the shop owner) are the data controller responsible for ensuring you have the legal right to collect and process your customers' data under applicable law, including the Digital Personal Data Protection Act (DPDPA) 2023.
C. Automatically Collected Information
When you use our Service, we automatically collect certain information about your device and usage:
- Device Data: Device type, operating system version, unique device identifiers, and crash reports collected via Firebase Crashlytics to help us fix bugs.
- Usage Data: Analytics regarding how you interact with the app (e.g., features used, screen visits) collected via Firebase Analytics. This data is aggregated and anonymized.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the RITE POS application.
- Sync your data securely across your devices using Firebase Firestore.
- Process transactions and manage your subscription via RevenueCat and Google Play.
- Send you technical notices, updates, security alerts, and support messages.
- Monitor and analyze usage trends to improve the app's performance and design.
- Comply with legal obligations, such as data retention requirements for GST reporting in India.
- Respond to your customer support requests and inquiries.
3. Data Storage and Security
Offline-First Architecture
RITE POS is designed with an offline-first architecture. Your data is stored locally on your device using Isar, an encrypted local database. This data is subsequently synced securely to our cloud backend (Firebase) when internet connectivity is available.
Cloud Security
All synced data is stored on Google Cloud (Firebase) servers located within Google's infrastructure. We employ Firebase Security Rules to ensure that your shop's data is strictly isolated and can only be accessed by authenticated users explicitly linked to your shop (yourself and authorized employees).
While we use industry-standard security measures, no electronic transmission or storage is 100% secure. We cannot guarantee absolute security but take all reasonable and practical steps to protect your data.
Data Residency
Our Firebase project is hosted on Google Cloud infrastructure. Data may be stored on servers located outside India, including in the United States. By using RITE POS, you consent to such transfers, which are governed by Google's data processing terms.
4. Sharing Your Information
We do not sell, rent, or trade your personal or business data to third parties for marketing. We may share your information only in the following circumstances:
- Service Providers: We share data with trusted third-party services that power our app, including Google Firebase (database, analytics, authentication), RevenueCat (subscription management), and Sentry/Crashlytics (crash reporting).
- Legal Compliance: We may disclose your information if required to do so by law, court order, or a legitimate government request from Indian tax or regulatory authorities (e.g., IT Department, GST Council).
- Business Transfers: If RITE Labs is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that business asset, with appropriate notice to you.
5. Employee Access and Roles
If you use our multi-employee features, you have the ability to grant access to your shop's data to your staff (Managers, Cashiers, etc.). You are responsible for managing these permissions, training your employees on appropriate data handling, and ensuring your employees comply with your legal obligations as a data controller.
6. Your Data Rights (DPDPA Compliance)
Under India's Digital Personal Data Protection Act (DPDPA) 2023 and other applicable laws, you have the following rights regarding your personal data:
- Right of Access: You can review your personal and business information directly within the app's Settings Hub.
- Right to Correction: You can update any incorrect information directly in the app.
- Right to Data Portability: You can export your inventory, transaction, and customer data at any time via the app's Export feature in Settings → Data & Backup.
- Right to Erasure: You can request the deletion of your account and all associated shop data. See our Data Deletion page for the full process.
- Right to Withdraw Consent: You may withdraw your consent to data processing at any time, though this will require account deletion as the core service cannot function without processing your data.
- Right to Grievance Redressal: Contact our Data Protection Contact at sahoosoumya242004@gmail.com for any data-related concerns.
We will respond to data rights requests within 30 days of receipt.
7. Data Retention
- Account and profile data is retained until your account is deleted.
- Transaction/invoice data is retained for 7 years from the date of the transaction, as required by Indian GST regulations (Section 36 of the CGST Act, 2017). This retained data is anonymized where possible.
- Crash and analytics data is retained for up to 90 days by Google Firebase Analytics and Crashlytics.
8. Third-Party Services
Our app integrates with third-party services. When you use these integrations, their respective privacy policies govern the data shared with them:
- Google Firebase — Firebase Privacy Policy
- RevenueCat — RevenueCat Privacy Policy
- Google Play Store — Google Privacy Policy
- WhatsApp (when sharing invoices) — WhatsApp Privacy Policy
9. Children's Privacy
RITE POS is a business application designed for use by adults running commercial establishments. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently collected data from a minor, please contact us immediately at sahoosoumya242004@gmail.com.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any significant changes by displaying a prominent notice within the app and updating the "Last Updated" date at the top of this page. Your continued use of RITE POS after such changes constitutes your acceptance of the updated policy.
11. Contact Us / Data Protection Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or your data rights, please contact us:
- Email: sahoosoumya242004@gmail.com
- Subject Line: "Privacy Policy Inquiry" or "Data Rights Request"
- Response Time: Within 30 days
- Address: RITE Labs, India 🇮🇳