shopnest / privacy_policy
shopnest — Privacy Policy
Last updated: October 29, 2026. Applies to shopnest (com.mistcast.shopnest).
§01Overview & Offline-First Architecture
shopnest is an offline-first Retail Point of Sale (POS), billing, and inventory management application designed for retail merchants, store owners, and cashiers.
By design, shopnest stores all your store catalogs, inventory items, prices, barcodes, sales invoices, and customer credit (Udhaar) records in an encrypted local SQLite database directly on your device. You can operate shopnest entirely offline in Standalone Mode without an account or internet connection.
§02Information We Collect (When You Choose Cloud Sync)
If you choose to create a shop account or sign in with Google or Email/Password to enable multi-device sync and automated cloud backups, we collect and process the following information:
| Category | What | Why | Storage |
|---|---|---|---|
| Account & Auth | Store owner email, hashed password, staff identifiers, store name | To authenticate your shop and manage access credentials | Cloud Database / Auth |
| Store Catalog | Product names, barcodes, purchase/selling prices, categories, stock counts | To sync inventory and prices across your shop terminals | Cloud Database (Encrypted) |
| Sales & Billing | Invoice numbers, line items, timestamps, payment methods (Cash/UPI/Credit) | To maintain sales history, calculate profits, and generate daily close summaries | Cloud Database (Encrypted) |
| Customer Credit | Customer name, phone number, and outstanding credit balances (Udhaar ledger) | To record dues and track repayments as requested by you | Cloud Database (Encrypted) |
Information we never collect: shopnest does not collect payment card numbers, CVVs, bank account credentials, or UPI MPINs. All retail transactions are registered as merchant bookkeeping records only.
§03Hardware Permissions & On-Device Processing
-
Camera Permission (
android.permission.CAMERA): Used exclusively to scan barcodes and QR codes on physical products during checkout, stock audits, and catalog setup. The video feed is analyzed frame-by-frame in volatile device memory by the local barcode scanner engine. No camera pictures or video recordings are saved to storage or uploaded to our servers. -
Biometric Authentication (Fingerprint / Face Unlock):
Used optionally to secure Day Close reports, register locks, or app authentication. Biometric checks are
handled exclusively by Android Keystore and the system
BiometricPrompthardware. shopnest never accesses, collects, or transmits your biometric data.
§04Third-Party Services
- Google Firebase / Cloud Infrastructure: Provides user authentication, real-time database sync, and encrypted cloud backups.
- Resend API: Used to securely deliver digital receipts, invoices, verification codes, or store audit reports to merchant and customer emails.
- Google Play Services: Used for app integrity, update delivery, and performance monitoring.
All third-party services adhere to industry security standards and Google's Privacy Policy: https://policies.google.com/privacy.
§05Data Sharing & No Advertising
shopnest contains zero advertisements. We do not sell, rent, or trade your merchant data, product pricing, sales metrics, or customer details to any third-party advertisers or data brokers. Your shop's operational and financial data belongs solely to you.
§06Data Retention & Account Deletion
You have full control over your data:
- Local Data: You can wipe all local offline data at any time by uninstalling the app or choosing App Info > Clear Storage in Android settings.
- Cloud Data & Account Deletion: You can delete your cloud account and all synced store data directly within the app by navigating to Store Profile > Delete Account & Cloud Data.
- Web Request: You can also request complete account deletion at any time via our official portal at: https://mistcast.web.app/account-deletion or by emailing our developer team.
§07Security & Encryption
All communications between shopnest and our cloud backend are encrypted using Transport Layer Security (TLS 1.2 / TLS 1.3). Local databases on your Android device are stored in private app sandboxes isolated from other applications.
§08Changes to This Privacy Policy
We may update this policy periodically to reflect new features or regulatory requirements. Any updates will be published on this page with an updated "Last updated" date.
§09Contact Us
If you have questions or suggestions regarding this Privacy Policy, please reach out:
- Email: mistcastofficial@gmail.com • ranjanankit64@gmail.com
- Publisher: MistCast
- Website: https://mistcast.web.app