Privacy Policy
Inventorini (“the app”, “we”, “us”) is operated by DevMarDe. This policy explains what the app collects, why, and what control you have over it.
Who this policy is for
Inventorini is a business tool for shop owners and their staff. Two kinds of people appear in this policy:
- You: the shop owner or staff member who signs in and records stock and sales.
- Your customers: people who visit your public store page. They do not have accounts and we do not collect anything from them beyond ordinary web-server logs.
What we collect
Account information you give us
- Your name and your shop's name
- Your username
- Your email address
- Your phone number
- A PIN, which is stored only as an irreversible hash: we cannot read your PIN, and neither can anyone else
Business data you enter
- Products, stock quantities, container imports, costs and sale prices
- Sales, bills and customer names you choose to type on a bill
- Photos you upload for your store page, if you use that feature
Technical data
- A record of actions taken in your shop (for example “sale recorded”, “stock added”) with the time and the user, which powers your activity history and your plan’s usage counter
- Device and browser information, IP address, and sign-in times, kept for security
- If you enable biometric unlock, a public key for your device. We never receive your fingerprint or face data. That stays on your phone and never leaves it: your phone only tells the app whether the check passed.
Advertising
- The free version of the app shows a single banner advertisement supplied by Google AdSense. Google may set identifiers on your device to serve and measure those ads, as described in Google’s own privacy policy at https://policies.google.com/privacy.
- The paid version shows no advertisements and loads no advertising code at all.
What we do not collect
- We do not collect your location.
- We do not read your contacts, messages, call logs, photos (beyond the ones you upload yourself), or any other app’s data.
- We do not collect payment card details. Subscription payments are handled entirely by Google Play; we only receive confirmation that a subscription is active.
How we use it
- To run the app and show you your own data
- To sign you in and keep you signed in on your device
- To count usage against your plan's free allowance
- To provide support when you ask for it
- To keep encrypted backups so your records survive a lost or broken phone
- To detect and prevent abuse
We do not sell your data. We do not share your business data with other shops, advertisers, or anyone else.
Who can see your business data
- You and the staff you give accounts to. Each shop’s data is isolated from every other shop.
- DevMarDe administrators, who can see account details (shop name, contact details, plan, and when the shop was last used) for support and billing, and who can restore a backup at your request.
- Our hosting providers, who store the data on our behalf: Supabase (database and files) and Vercel (application hosting). They process data under their own agreements and do not use it for their own purposes.
- Google, for Play subscription billing and, on the free version only, advertising.
- Google Drive, only if you connect your own Drive account for backups. Those backups are encrypted before they leave our servers.
Your public store page
If you switch on your store page, the products, prices, descriptions and photos you mark as public become visible to anyone with the link. Your stock quantities are never shown. Visitors see only “in stock” or “out of stock”, and only if you enable that. You can switch the store off at any time from Settings.
How long we keep it
- While your shop is active, we keep your data so you can use it.
- If your free period ends and you do not subscribe, your data is kept, not deleted, so nothing is lost while you decide.
- If you ask us to delete your shop, we delete it from our live systems within 30 days. Encrypted backups are cycled out within 90 days.
Deleting your account and data
To delete your shop and everything in it:
- Email hello@devmarde.com from the address on your account, or
- Message +92 306 072 0072 on WhatsApp from the number on your account
Say that you want your shop deleted and give your shop name or username. We will confirm and complete the deletion within 30 days. This removes your account, your products, your stock ledger, your sales and bills, your store page and your uploaded images.
The app also has an emergency wipe inside Settings, which clears your business records immediately using your master key. That wipes the data but leaves the account in place.
Security
- All traffic uses HTTPS.
- PINs and master keys are stored as bcrypt hashes, never in readable form.
- Backups are encrypted with AES-256-GCM before they are stored.
- You can lock the app behind your phone's fingerprint, face unlock or a PIN.
- Signing in from a new device creates a session you can revoke; resetting your PIN signs every other device out.
No system is perfectly secure, but we do not store anything we do not need, and we do not have access to your PIN.
Children
Inventorini is a business tool intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.
Changes
If we change this policy we will update the date at the top and, for anything significant, tell you inside the app. Continuing to use the app after a change means you accept it.