PopTill Privacy Policy

In short

• Your products, events, sales, stock and photos stay on your own device. We never receive them.
• There are no accounts and no analytics in the app.
• From version 1.0, the free plan shows one small advert on the Events screen, provided by Google AdMob. PopTill Pro removes it.
• PopTill Pro is a one-time purchase handled by Google Play (or Apple’s App Store). We never see your payment details.

1. Who we are

PopTill is a point-of-sale and event inventory app for markets, pop-ups and small vendors. It is published by Fullstack Labs PLT, Kuala Lumpur, Malaysia. This policy covers the PopTill app only. Our website is covered by our website privacy policy.

2. Data that stays on your device

PopTill stores the following in the app’s private storage on your device:

• Products, events, prices and stock levels
• Sales, corrections and the audit history of changes
• Your business name, logo and payment QR image
• Product pictures you choose
• App settings, such as reminder preferences

This information is not uploaded to us or to anyone else. Pictures are chosen with your system’s photo picker, and PopTill copies only the images you pick.

The optional admin PIN is kept in your device’s secure storage as a salted hash. It is never written to the app database, logs or backups.

Backups and CSV exports are created only when you ask. They leave the app only through your system’s share sheet, to the place you choose. Backups are not encrypted, so keep them somewhere you trust.

3. What we collect

Nothing. PopTill has no accounts, and we run no server that receives your data. The app contains no analytics or crash-reporting service of ours. The app asks for network access only so the optional purchase and advert features (sections 4 and 5) can work.

4. Adverts on the free plan

From version 1.0, people on the free plan see one small, clearly labelled banner advert. It appears only on the Events screen, and never while you are selling, viewing the basket, showing a payment QR, checking out, editing or voiding a sale, or viewing audit history. Earlier beta versions (0.x) show no adverts and do not start the advertising library.

Adverts are provided by Google AdMob. When an advert is requested, Google may receive information such as your device’s advertising ID, IP address, an approximate location derived from it, and technical details about the device and app. No sale, product, customer or stock information is ever included in an advert request. How Google handles this is described in Google’s advertising policies (opens in new tab).

Where the law requires it (for example in the European Economic Area, the United Kingdom and some US states), PopTill shows Google’s consent form before any advert is requested. If you decline, no advert is shown. You can change your choice at any time from Settings → Ad privacy options, which appears wherever a choice is required. You can also reset or delete your advertising ID in your device’s own settings. Buying PopTill Pro removes adverts, and the advertising library is not started.

5. PopTill Pro purchase

PopTill Pro is a one-time purchase, not a subscription. Payment is handled entirely by Google Play (or Apple’s App Store). We never see your card or payment details. The app learns only whether Pro is active for your store account, and keeps that fact in your device’s secure storage so it works offline. Restore Purchases works without any PopTill account. A purchase unlocks Pro for the store account that bought it, on that kind of device (Android or iPhone).

6. Reminders and rating requests

Event reminders are notifications scheduled on your device by your operating system. Nothing is sent from a server. PopTill asks for notification permission only when you save an event with a reminder, or when you turn reminders on, and you can switch reminders off at any time.

Occasionally PopTill asks your system to show its standard “rate this app” sheet. The store decides whether it appears, and PopTill receives no information about what you answer.

7. Children

PopTill is a business tool and is not directed at children. We do not knowingly collect personal information from children.

8. Deleting your data

Because your data lives only on your device, you control it. Uninstalling PopTill or clearing its storage removes all PopTill data from the device. Your device’s own backup service (such as Google or iCloud backup) may keep a copy of app storage, according to your device settings. Backup and export files you created yourself stay where you saved them until you delete them.

9. Your rights

Under Malaysia’s Personal Data Protection Act 2010, and under laws such as the GDPR, UK GDPR and California privacy law where they apply to you, you may have rights to access, correct or delete personal data held about you. We hold no personal data from the app, so there is nothing to retrieve from us. For adverts, you can use the controls described in section 4 and Google’s own privacy tools. For any question, contact us using the details below.

10. Security

Keeping your business records on your device means they are not stored on a server that could be breached. Please protect your device with a screen lock and keep your backups somewhere safe. No system can be guaranteed to be completely secure.

11. Changes to this policy

We may update this policy, for example when the app gains new features. The date at the top of this page shows the latest revision. If a change affects what data is handled, we will also say so in the app’s store listing.

12. Contact

Questions about this policy or the PopTill app: email pgmc@fullstacklabs.my.