Privacy Policy

What We Access

• Camera — used to scan barcodes and take product photos. All images are stored locally on your device only.
• Internet — used only to retrieve public product data from Open Food Facts during barcode lookup. No user data is sent. This can be disabled with the offline mode toggle.
• Notifications — used for expiration reminders and optional 7-day early warning alerts (Android 13+).
• Biometric / device auth — optionally used for local password reset. No biometric data is stored or transmitted.

No ads. No analytics. No tracking. No data leaves your device.

Employee Credentials

Employee passwords and PINs are stored as bcrypt hashes on the device only. Plain-text credentials are never stored anywhere. Temporary passwords generated during a reset expire within 24 hours.

Account Recovery (Local-Only)

• PIN reset — an admin or owner can clear any employee's PIN from the Employee Details screen. The employee sets a new PIN on next login.
• Password reset — an admin or owner can generate a temporary password for admin accounts from the Employee Details screen.
• Last resort — data wipe — the Owner can wipe all local app data from the login screen overflow menu to return the app to first-run state.

Wiping data permanently deletes all inventory and employee data on the device and cannot be undone.