Privacy policy

RapidPOS is billing and bookkeeping software for a shop. You sign in to a business account, and the app shows and edits that business's records.

• We collect what you type into the app, and what your account needs to work.
• Everything goes to our own servers and nowhere else.
• There is no advertising, no analytics and no tracking of any kind in this app. No third-party company receives your data.
• We do not know where you are. The app never asks for your location.

Your account. Your name, email address, phone number and the business you belong to. You cannot create an account in the app — one is created for you when your business signs up — and this information comes with it.

The records you enter. Customers and suppliers, items and stock, invoices, purchases, payments, expenses and the ledgers built from them. This is the purpose of the app. Some of it is personal information about your customers, which you enter and control; you are responsible for having the right to do so.

Photos you take. Only when you choose to: a picture of an item, your business logo, your profile photo, or a photo of an expense receipt. The app uses the camera to take a new picture; it does not read your photo gallery.

Files you open into the app. If you share a backup, a spreadsheet or a supplier's invoice PDF into RapidPOS from another app, Android hands over that one file and nothing else. The app cannot browse your storage, and asks for no permission that would let it.

Your device's camera, for scanning. Barcode scanning happens entirely on your phone. Camera images used for scanning are not recorded and never leave the device.

Basic device details, with support messages. When you contact support from the app, it attaches your phone's make and model, its Android version and the app build number, so we do not have to ask.

Crash reports, only if you send them. If the app fails, it saves a technical description of the failure on your phone. Nothing is uploaded automatically. It is sent only if you open Support, leave the “attach it” switch on, and send a message. You can switch it off. The report describes what broke — it does not contain your invoices, customers or payments.

• Location. The app never requests or uses it. Bluetooth printing is declared in a way that explicitly tells Android it is not being used to infer location.
• Your contacts, calendar, messages, call log, microphone or photo gallery.
• Advertising identifiers. There are no ads and no ad SDK.
• Analytics. No usage tracking or behavioural profiling of any kind.
• Card numbers or bank credentials. See “Taking a payment online” below.

If your business has connected a payment gateway, an invoice can offer “Take payment online”. That opens your phone's own web browser at a secure page, where the gateway — currently Razorpay — collects the payment.

The card or UPI details are entered in the browser, on the gateway's own checkout, and are handled by the gateway under its own privacy policy. They never pass through the RapidPOS app. RapidPOS is told only that a payment of a given amount succeeded or failed, so it can mark the invoice.

RapidPOS does not process, hold or lend money. It records that a payment happened.

Only to run the service: to sign you in, to show and store your business records, to produce your invoices, reports and GST returns, to print and share documents you ask it to, and to answer you when you contact support.

We do not sell your data. We do not share it with third parties for their own purposes. We do not use it to advertise to you or profile you.

• Other people in your business, according to the role their owner gave them.
• Our hosting provider, which stores the servers the service runs on.
• Your payment gateway, if you have connected one, for the payments you take through it.
• Anyone you send a document to — when you share an invoice or a report over WhatsApp, email or another app, that app and its recipient receive it. That is you sending it, using your phone's own share sheet.
• Authorities, where the law requires it.

On servers in India, for as long as your business account is active. Some records — invoices, tax documents — must be kept for statutory periods under Indian tax law, and are retained accordingly even if you stop using the app.

On your phone, the app keeps your sign-in token, a cache of recently viewed records so it still works when the shop's internet drops, any bills queued while offline, your printer settings, and any unsent crash report. Signing out clears your credentials. Uninstalling the app removes all of it from the device.

Traffic between the app and our servers is encrypted with HTTPS. The released app is built so that it cannot send unencrypted traffic at all. Sign-in sessions are limited to a small number of networks per account, and you can see and end sessions from your account.

No system is perfectly secure, and we do not claim otherwise. Treat your password as you would the key to the till.

• Camera and Bluetooth permissions can be refused or withdrawn in Android Settings at any time. Refusing the camera means typing item codes instead of scanning; refusing Bluetooth means no thermal printing. Nothing else changes.
• Crash reports can be left unsent, or the switch turned off before sending.
• Your records can be exported at any time from Utilities → Export.
• Access, correction and deletion are described on the account-deletion page linked below.

RapidPOS is business software and is not directed at children. We do not knowingly collect information from anyone under 18.

If this policy changes we will update the date at the top and, for anything that materially affects you, tell you in the app or by email.