Draft — pending legal reviewThis text has not yet been reviewed by a lawyer. Bracketed items are still to be filled in.
Privacy Policy
Panindo helps small stores keep track of stock. To do that, it has to store some information about you and your store. This page explains what, why, where, for how long, and what you can do about it.
1. Who we are
Panindo is operated by [OPERATOR LEGAL NAME], an individual developer based in the Philippines ("we", "us"). There is no registered company yet. For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), we are the personal information controller for the information described here.
Contact: support@panindo.app, or by post at [MAILING ADDRESS].
2. What this policy covers
This policy covers the Panindo app for Android, the Panindo web app, and this website (panindo.app). Together we call them "the service".
3. What we collect
- Account data
- Your email address and password. We never store your password itself, only a salted hash of it. If you sign in with Google, we receive your name and email address from Google.
- Store (organization) data
- Your store's name, the email address and role of each member, and pending invitations, including the email address someone was invited with.
- Inventory data
- The items you add: names, quantities, prices, categories, barcodes, and low-stock thresholds.
- Activity log
- Every stock change, with the email of the person who made it and when. For stock counts, we also keep the time shown on the device that made the count.
- Device and technical data
- Your IP address and browser or device user agent, recorded in server logs and session records; push notification tokens, so we can send alerts to your device; and the app version you're using.
- Crash reports
- When the app or our servers hit an error, technical details about it are sent to Sentry so we can fix it.
- Product analytics
- We use PostHog to count how features are used (for example, how long it takes to go from a scan to a saved stock change). We do not put personal data in these event properties.
- Purchases
- Subscriptions are sold by Google Play, not by us. We receive the subscription status: plan, expiry date, renewal state, and the store's transaction IDs. We never receive your card or payment details.
4. Barcode lookups
When you scan a barcode that isn't in your store yet, we send only the barcode number to Open Food Facts and UPCItemDB to look up a product name. Nothing else about you or your store is sent with it.
5. How we use it
- To provide the service: your account, your stores, your inventory, syncing across devices, and the activity log.
- Security and abuse prevention: tracking failed sign-in attempts and applying rate limits.
- Transactional emails: email verification, password resets, invitations, and low-stock alerts if you turn them on.
- Push alerts you opt into, such as low-stock warnings.
- Product improvement: crash reports and usage analytics.
- Billing status: knowing which plan your store is on and when it renews.
We process this information to perform our agreement with you (the Terms of Service), for our legitimate interest in keeping the service secure and working well, to meet legal obligations, and, for optional alerts, with your consent, which you can withdraw in the app's settings at any time.
7. What we never do
- We don't sell your personal data.
- We don't show ads.
- We don't track you across other companies' apps or websites.
- This website (panindo.app) sets no cookies and runs no analytics or tracking scripts.
8. Your data is stored in the United States
Panindo's servers are in the United States, so your information is stored and processed there, including if you live in the Philippines. Under the Data Privacy Act, we remain responsible for your information when it is processed outside the Philippines, and we use providers that protect it with security measures comparable to those the Act requires.
9. How long we keep it
| Information | Kept for |
|---|---|
| Your account and store data | As long as your account exists |
| Deleted items | Recoverable for 30 days, then permanently purged |
| Account deletion | Completed within 30 days of your request |
| Server logs | 30 days |
| Backups | Up to 35 days |
| Failed sign-in records | 15 minutes |
| Password reset links | Expire after 1 hour |
Some subscription and billing records may be kept longer where tax or other laws require it. See Delete your account for details.
10. Security
- All traffic is encrypted in transit (HTTPS).
- Passwords are stored only as salted hashes.
- Access inside a store is role-based (Owner, Admin, Editor, Viewer), and the server checks it on every request.
- When someone is removed from a store, their access ends immediately.
No system is perfectly secure. If we learn of a breach that affects you, we will notify you and the authorities as the law requires.
11. Your rights
If you're in the Philippines
Under the Data Privacy Act, you have the right to:
- be informed about how your personal data is processed;
- access your personal data;
- object to processing;
- have your data erased or blocked;
- have inaccurate data corrected (rectification);
- get your data in a portable format (data portability);
- claim damages for harm caused by inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your data; and
- file a complaint with the National Privacy Commission.
If you're in the United States
You can ask to access, correct, or delete your personal information. We won't treat you differently, charge you more, or give you a worse service for exercising these rights.
How to exercise them
Many of these you can do yourself in the app's settings: edit your details, export your store's inventory to CSV, turn alerts off, or delete your account. For anything else, email support@panindo.app from the email address on your account so we can confirm it's you.
12. Children
Panindo is a tool for running a store and is not directed to children. You must be 18 or older, or of legal age to enter into contracts where you live, to use it.
13. Changes to this policy
If we make a material change, we'll tell you in the app or by email before it takes effect. The effective date at the top of this page always shows the current version.
14. Contact and complaints
Questions or requests: support@panindo.app
Post: [OPERATOR LEGAL NAME], [MAILING ADDRESS]
If you're in the Philippines and not satisfied with our answer, you can complain to the National Privacy Commission.