Privacy Policy
Centrix POS Application - Your Privacy Matters
This Privacy Policy describes how Centrix POS ("we," "us," or "our") collects, uses, stores, and protects information when you use the Centrix POS application ("App") on your iPad device. This policy applies to merchants, business owners, employees, and end customers whose data is processed through our App.
By using Centrix POS, you agree to the collection and use of information in accordance with this policy.
Table of Contents
- Information We Collect
- How We Use Your Information
- Data Storage and Security
- Data Sharing and Disclosure
- Data Retention
- Your Rights and Choices
- Account Deletion
- International Data Transfers
- Children's Privacy
- Data Breach Notification
- Changes to This Policy
- Compliance
- Contact Us
- Governing Law
- Consent
Information We Collect
Centrix POS is a point-of-sale application designed for restaurants, cafes, and retail businesses. We collect the following types of information:
1.1 Business Account Information
- Business name and domain
- Account credentials (username, email, password)
- Branch information
- Business configuration settings
- POS terminal identification
1.2 Transaction Data
- Sale amounts and transaction records
- Payment method types (cash, card, etc.)
- Order details (products, quantities, prices)
- Receipt information
- Refund and void records
- Cash in/out records
- Register opening and closing balances
- Session logs and timestamps
1.3 Employee Data
- Employee names and usernames
- Employee roles and permissions
- Login credentials
- Work session logs and timestamps
- Biometric data (fingerprints) - see Section 1.4
1.4 Biometric Data (Fingerprints)
- We collect fingerprint data for employee authentication purposes
- Fingerprints are stored ONLY on your local iPad device using Apple's Secure Enclave
- Biometric data is NEVER uploaded to our cloud servers
- Fingerprints are NEVER shared with third parties
- Fingerprint data is automatically deleted when an employee is removed from the device
- Use of fingerprint authentication is optional; employees can use password authentication instead
- By enabling fingerprint authentication, you consent to the collection and local storage of this biometric data
1.5 Customer Data
- Customer names and contact information
- Purchase history and order records
- Loyalty rewards points and status
- Customer preferences and notes
- Custom pricing information
1.6 Product and Inventory Data
- Product catalog and descriptions
- Pricing information
- Inventory levels and stock data
- Product categories and subcategories
- Product modifiers and add-ons
- Barcode information
1.7 Device and Technical Data
- iPad device model and operating system version
- Device identifiers
- App version and settings
- Network connectivity status
How We Use Your Information
We use the collected information for the following purposes:
2.1 Business Operations
- Process and record sales transactions
- Manage inventory and product catalog
- Generate receipts and invoices
- Track cash register operations
- Create business reports and analytics
- Support multi-branch operations
2.2 Employee Management
- Authenticate employee access to the App
- Track employee performance and sales
- Manage roles and permissions
- Monitor work sessions and register operations
2.3 Customer Management
- Maintain customer purchase history
- Manage loyalty rewards programs
- Provide personalized service
- Process refunds and returns
2.4 App Functionality
- Synchronize data across multiple devices via Odoo backend
- Enable offline mode functionality
- Provide cloud backup and data recovery via Odoo servers
- Send push notifications for orders and updates
- Provide customer support
Data Storage and Security
3.1 Where Data is Stored
Your data is stored in two locations:
π± Local Storage (iPad Device)
- All business, transaction, and product data is stored locally on your iPad
- Enables offline functionality when internet is unavailable
- Biometric data (fingerprints) is stored ONLY on device in Apple's Secure Enclave
βοΈ Cloud Storage (CAF Servers - Odoo Platform)
- Business account information
- Transaction history and reports
- Customer data
- Employee data (excluding fingerprints)
- Product catalog
- Enables data synchronization across multiple devices
- Provides data backup and recovery
3.2 Security Measures
We implement industry-standard security measures to protect your data:
- End-to-end encryption for data transmission (SSL/TLS)
- Encrypted data storage (at rest and in transit)
- Secure authentication with password protection
- Biometric authentication using Apple's Secure Enclave
- Regular security audits and updates
- Access controls and role-based permissions
- Automatic session timeouts
- Secure cloud infrastructure (Odoo Platform)
3.3 Data Backup
- Automatic cloud backup of business data
- Local backup on iPad device
- Data recovery available upon request
Data Sharing and Disclosure
4.1 We Do Not Sell Your Data
We do not sell, trade, rent, or transfer your personal or business information to third parties for marketing purposes.
4.2 Third-Party Services
We use the following third-party services to operate the App:
Firebase (Google)
- Purpose: Push notifications and crash analytics
- Data Shared: Device token for notification delivery, notification content
- Privacy Policy: https://firebase.google.com/support/privacy
Odoo
- Purpose: Cloud data storage, synchronization, and backend services
- Data Shared: Business account data, transactions, customer data, employee data (excluding fingerprints), product catalog, inventory
- Privacy Policy: https://www.odoo.com/privacy
Card payments are processed by a connected KNET-certified payment terminal and the KNET network. The App facilitates the transaction but does not handle card data β it stores only the transaction authorization/reference code returned by the terminal, used to match payments to orders and for settlement reconciliation.
We do not use third-party analytics or crash reporting services.
4.3 Legal Requirements
We may disclose your information if required by law, court order, or government regulation, or to:
- Protect our legal rights
- Prevent fraud or security threats
- Comply with legal investigations
4.4 Business Transfers
If Centrix POS is involved in a merger, acquisition, or asset sale, your data may be transferred. We will provide notice before your data is transferred and subject to a different privacy policy.
Data Retention
5.1 Retention Periods
- Transaction Data: Retained indefinitely for business records and tax compliance
- Customer Data: Retained as long as the business account is active
- Employee Data: Retained as long as the employee has access to the system
- Biometric Data: Stored on device only until employee is removed
- Backup Data: Retained for 90 days after account deletion
5.2 Data Deletion
When you delete your account or remove an employee:
- Employee fingerprint data is immediately deleted from the device
- Cloud data can be deleted upon request (see Section 7)
- Local data remains on your iPad until manually deleted or app is uninstalled
Your Rights and Choices
You have the following rights regarding your data:
π Access
- Right to access all personal data we store about you
- Request a copy of your data in a portable format
βοΈ Correction
- Right to correct inaccurate or incomplete information
- Update your account information at any time within the App
ποΈ Deletion
- Right to request deletion of your personal data
- Right to request deletion of your business account and all associated data
- Note: Some data may be retained for legal or tax compliance purposes
π€ Data Portability
- Right to export your business data
- Available in common formats (CSV, JSON, PDF)
π« Withdraw Consent
- Right to withdraw consent for biometric data collection
- Can disable fingerprint authentication at any time
- Right to opt-out of push notifications
6.6 How to Exercise Your Rights
To exercise any of these rights, contact us at:
- Email: sales@centrixplus.com
- Phone: +965 9406 9744
- Response Time: We will respond within 30 business days
Account Deletion
7.1 How to Delete Your Account
To delete your account and all associated data:
π§ Method 1: Contact Support
- Email: sales@centrixplus.com
- Subject: "Account Deletion Request"
- Include: Business name, domain, and registered email address
π Method 2: Visit Website
- Go to: https://caf.centrix.sh/delete-account
- Fill out the account deletion form
7.2 What Happens When You Delete Your Account
- All business data will be permanently deleted within 30 days
- Transaction history will be archived for tax compliance (7 years) then deleted
- Employee data will be removed (fingerprints are deleted immediately)
- Customer data associated with your account will be deleted
- Local data on iPad will remain until you uninstall the App
- β οΈ This action is irreversible
International Data Transfers
If you use Centrix POS outside of Kuwait, your data may be transferred to and stored in servers located in different countries. By using the App, you consent to the transfer of your data to these locations. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
Children's Privacy
Centrix POS is a business application intended for use by adults (18 years and older). We do not knowingly collect personal information from children under 18. If you believe we have collected information from a minor, please contact us immediately, and we will delete it.
Data Breach Notification
In the event of a data breach that affects your personal or business information:
- We will notify you within 72 hours of discovering the breach
- Notification will be sent via email to your registered account email
- We will describe the nature of the breach and steps being taken
- We will provide recommendations to protect your information
- We will comply with all applicable data breach notification laws
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be effective when:
- The updated policy is posted in the App
- The "Last Updated" date at the top is changed
- We will notify you of significant changes via:
- Push notification
- Email notification
- In-app notice
Your continued use of the App after changes constitutes acceptance of the updated policy.
Compliance
This Privacy Policy complies with:
Contact Us
Get in Touch
Centrix POS
Response Time: We aim to respond to all inquiries within 30 business days.
Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of Kuwait. Any disputes relating to this policy will be subject to the exclusive jurisdiction of the courts of Kuwait.
Consent
By downloading, installing, or using Centrix POS, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.