Privacy Policy for Product Catalog

Last Updated: August 7, 2026

This Privacy Policy describes how alkashier ("Company", "we", "us", or "our") collects, uses, discloses, and safeguards your information when you use our mobile application, Product Catalog (package name: com.alkashier.prodcatalog), and our associated public web storefront services (collectively, the "Service").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

1. Information We Collect

A. Data Collected Directly from Merchants

When you register for and use the Product Catalog merchant app, we collect the following information:

• Account Credentials: Email address and password used for authentication to our backend (Laravel POS). Passwords are used strictly for authentication and are never stored in plain text on our servers.
• Session Tokens: A bearer session token stored securely on your device to maintain your logged-in session.
• Catalog Information: Product names, prices, descriptions, categories, and photos uploaded to manage your inventory and publish your public web storefront.

B. Data Collected from Buyers on the Public Web Storefront

When customers ("Buyers") interact with a merchant's published storefront and submit a cash-on-delivery (COD) order, we collect:

• Customer Order Details: Buyer name, phone number, physical delivery address, and order item contents.
• Data Retention: Buyer data is retained for a limited operational window necessary to complete order fulfillment and service provisioning, and may be deleted upon request.

C. Automatically Collected Data and Identifiers

When you access or use the mobile app, certain information is automatically transmitted by your device or collected via integrated Third-Party Software Development Kits (SDKs):

• Advertising Identifiers: Google Android Advertising ID (AAID) or Apple Identifier for Advertisers (IDFA).
• Device & Network Information: IP address (used to infer coarse/approximate geographic location), device hardware model, operating system version, and mobile network information.
• Usage & Attribution Analytics: App interaction events, app_user_id, attribution_id, and performance data.

Note: We do NOT collect precise GPS location data, contacts, SMS messages, health data, or financial account numbers directly.

2. Advertising and Third-Party Advertising Partners

This application relies on advertising revenue to support its services. We partner with third-party ad networks to serve advertisements within the app.

Google AdMob

We use Google AdMob to display advertising banners on the Home screen. AdMob and its certified third-party advertising partners may collect and use information about your visits to this app and other apps, including:

• Advertising Identifiers (Android Advertising ID / Apple IDFA).
• IP address and coarse/approximate location derived from IP.
• Ad interaction data (e.g., ad views, clicks, and impressions).

EEA, UK, and Switzerland User Consent (Google UMP & Apple ATT)

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, personalised advertising is presented to you only after obtaining your explicit consent through Google's User Messaging Platform (UMP), an IAB TCF-certified consent form presented when you launch the app.

On iOS devices, after completing the consent choices, an Apple App Tracking Transparency (ATT) prompt may be presented before any advertising request is executed. You may change or withdraw your consent at any time through the app's internal Privacy / Consent Options in Settings.

How to Opt-Out / Reset Advertising Identifiers on Your Device

You can manage, reset, or block advertising identifiers directly via your mobile operating system settings:

• Android: Go to Settings > Privacy > Ads (or Settings > Google > Ads), where you can "Reset advertising ID" or "Delete advertising ID".
• iOS: Go to Settings > Privacy & Security > Tracking and toggle off "Allow Apps to Request to Track", or control permissions per app.

3. Subscriptions and Payment Processing

Product Catalog offers a premium subscription plan named "Catalog Pro", which unlocks unlimited product listings (the free tier is capped at 10 products). Catalog Pro is sold exclusively as an auto-renewing monthly or yearly subscription handled entirely by official app store billing APIs:

• Apple StoreKit: Purchases made on iOS devices are processed by Apple Inc.
• Google Play Billing: Purchases made on Android devices are processed by Google LLC.

No other payment mechanism or external processor unlocks paid app features. We do not collect or store full credit card numbers or financial credentials on our servers.

4. Analytics and Third-Party SDK Services

We use third-party tools to analyze app usage, improve stability, and provide links/feedback services:

• SmartLinks (live.smartlinks): Used for attribution, analytics, dynamic routing, feedback, and cross-app linking. SmartLinks processes device IDs (app_user_id, attribution_id) and usage events.
• Firebase (Core, Messaging, Analytics, Auth): Integrated via SmartLinks to monitor crash reporting, send operational push notifications, and measure app usage performance.

5. Data Deletion Requests & Rights

You have the right to access, rectify, or request deletion of your personal data collected by us at any time.

6. European Economic Area (EEA) & UK Privacy Rights (GDPR)

If you are a resident of the European Economic Area or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access & Portability: Request copies of your personal data.
• Right to Erasure: Request the deletion of personal data processed under legitimate interest or consent.
• Right to Restrict & Object: Restrict processing or object to processing for direct advertising.
• Right to Withdraw Consent: Withdraw consent granted via the UMP form at any time without affecting the lawfulness of processing prior to withdrawal.

Our legal basis for processing data includes contract execution (merchant accounts and subscriptions), legitimate interests (app security, basic analytics), and consent (personalized AdMob ads in the EEA/UK).

7. California Privacy Rights (CCPA / CPRA)

This section applies to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CPRA).

Disclosure Regarding Sale or Sharing of Personal Information

While alkashier does not sell your personal data for monetary payment, our use of third-party advertising services (Google AdMob) involves sharing advertising identifiers, IP addresses, and app usage metrics. Under California law, disclosing these identifiers to third-party ad networks for targeted or cross-context behavioral advertising MAY CONSTITUTE a "sale" or "sharing" of personal information.

Your Rights Under CCPA/CPRA:

• Right to Know / Access: Request disclosure of categories and specific pieces of data collected.
• Right to Opt-Out of Sale or Sharing: You have the right to direct us not to share your personal information for cross-context behavioral advertising. You may exercise this right by resetting/limiting advertising tracking on your device settings or declining ad-tracking permissions in iOS/Android settings.
• Right to Deletion: Request deletion of your personal data held by us.
• Non-Discrimination: We will not discriminate against you for exercising any of your CPRA privacy rights.

8. Children's Privacy

Our Service is intended strictly for general business and commercial use by adults. It is not directed to children under the age of 13 (or 16 in certain jurisdictions), and we do not knowingly collect or solicit personal information from children. If we become aware that a child has provided us with personal information, we will take immediate steps to remove such information and terminate any associated account. If you believe a child has provided data to us, please contact us at support@alkashier.com.

9. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal obligations or app functionalities. The updated version will be indicated by a revised "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

10. Contact Us

If you have questions, privacy inquiries, legal requests, or concerns regarding this Privacy Policy, please contact our Legal & Privacy Department at:

Legal Entity: alkashier
App Name: Product Catalog (com.alkashier.prodcatalog)
Email: support@alkashier.com
Data Deletion Portal: https://smartlinks.live/legal/product-catalog/data-deletion