Privacy policy

Effective: 19 June 2026
Provider: HubCom, Vietnam
Contact: contact@hubcom.tech · solopos.hubcom.tech

Solo POS is an offline-first point-of-sale app for small shops. The data you create — products, sales, customers, cash entries, inventory — is stored on your device and is not sent to us. A few optional features send limited data off the device; they are described below and you control whether to use them.

Information we process

Shop data you create (stays on your device)

Products, prices, stock, sales, customers, cash-drawer entries, settings, and any photos you attach are stored locally in an on-device database. We do not collect, receive, or have access to this data. Backups you create are saved to a location you choose; we do not receive them.

Account information (only if you sign in)

Signing in is optional and required only for the AI assistant and account-gated features. We use Google Firebase Authentication (Google / Apple sign-in). We receive your email address and an authentication identifier to operate your account. We do not receive your social-account password.

AI assistant data (only if you use it)

When you send a message to the in-app AI assistant, your question text, a small system prompt, and the results of on-device tools (e.g. a revenue figure the assistant requested) are sent — over an authenticated connection — through our AI proxy (a Cloudflare Worker) to a third-party AI model provider to generate a reply. Your raw shop database is never sent. Usage is rate-limited by a per-user daily token cap. We do not use your content to train models.

Diagnostics and analytics

Crash reports via Google Firebase Crashlytics (device model, OS version, crash diagnostics). Usage analytics via Google Firebase Analytics are privacy-safe and optional: aggregate, non-identifying events with no monetary amounts and no customer data. You can turn this off in Menu → Share usage data.

Device permissions (used on your device)

Camera to scan product barcodes, Photos to attach product images, and Microphone for optional voice input to the AI assistant. These are used locally for the stated feature and are not collected by us.

Optional online services you can enable

Product lookup (Open Food Facts): a scanned barcode may be sent to fetch a product name/photo. E-invoice (MISA meInvoice): if you connect a MISA account, sale data needed to create a draft e-invoice is sent to MISA under your account.

How we use information

To operate and secure the app, provide the features you use (sign-in, AI assistant, optional lookups/e-invoice), keep the app working (crash diagnostics), and improve it (optional aggregate analytics).

Sharing and sub-processors

We do not sell your data. Limited data is processed by these providers only to deliver the relevant feature: Google (Firebase) — authentication, crash reporting, optional analytics; Cloudflare — hosts the AI proxy; our AI model provider — generates AI-assistant replies; MISA meInvoice — only if you connect e-invoicing; Open Food Facts — only if you enable product lookup.

Data retention

On-device data remains until you delete it or uninstall the app. Account and AI-proxy operational logs are retained only as long as needed to provide the service and meet legal obligations. You can request deletion (see Contact).

Security

Account credentials are handled by Firebase Authentication and platform secure storage; AI-assistant requests travel over encrypted (HTTPS) connections. No method of transmission or storage is 100% secure.

Your choices and rights

Use the app fully offline without an account. Turn off usage analytics in Menu → Share usage data. Sign out at any time; request deletion of your account and associated data by emailing contact@hubcom.tech.

International transfers

Some optional services (the AI proxy and the AI model provider) may process data on servers outside Vietnam. By using those features you consent to such transfers.

Children

Solo POS is a business tool and is not directed to children under 16.

Changes

We may update this policy; material changes will be posted at this URL with a new effective date.