Privacy Notice
Effective October 6, 2026
This notice explains how TindaPOS collects, uses, stores, and protects personal data when you create an account and use the service.
1. Who is responsible for your data?
TindaPOS is operated by John Rey Baliguat. For privacy questions or requests, contact baliguatjohnrey91@gmail.com.
2. Information we collect
Account information: name, email address, authentication information managed through Supabase Auth, account creation dates, and your Store Owner role.
Store information: store name, products, barcodes, prices, costs, product images, sales, expenses, reports, and related operational records.
Pautang information: customer name, mobile number, notes, balances, purchases, payments, and related transaction records entered by the Store Owner.
GCash and subscription information: transaction type, amount, fee, reference numbers, notes, subscription plan/status, payment reference, and uploaded payment receipt or screenshot.
Device and service information: session information needed to keep you signed in and local browser data used for PWA installation, caching, and offline Device Mode.
3. Why we use this information
We process information to create and secure your account, provide the POS service, maintain your store records, calculate reports and balances, manage subscriptions, verify submitted payments, send service-related emails, prevent abuse, troubleshoot problems, and protect the service.
Depending on the activity, processing may be necessary to provide the service you requested, comply with applicable legal obligations, protect legitimate security and operational interests, or be based on consent where consent is specifically required.
TindaPOS does not currently use your personal data for automated profiling or automated decisions that produce legal or similarly significant effects.
4. Service providers and recipients
We use third-party service providers to operate TindaPOS. These include Supabase for authentication, database, and file storage; Vercel for application hosting and deployment; and Resend for transactional email. Data may be processed by these providers only as needed to provide their services to TindaPOS. We do not sell your personal data.
5. Offline Device Mode
When Device Mode is prepared on a device, the latest product catalogue and queued offline cash-sale records may be stored locally in that browser using technologies such as IndexedDB and service-worker caches. Queued sales are sent to the server when the device reconnects. Anyone with access to that device may be able to access locally stored POS information, so use a secured device and sign out when appropriate.
6. Pautang customer information
Store Owners may enter information about their own customers, including names and mobile numbers, for Pautang records. The Store Owner is responsible for ensuring that customer information is collected and entered for a lawful and appropriate purpose and that customers are informed when required.
7. How long we keep information
Account and store information is generally retained while the account and service are active. After account closure or a valid deletion request, personal data will be deleted or anonymized when it is no longer reasonably needed for service operations, backups, security, fraud prevention, dispute resolution, transaction records, or applicable legal obligations. Backup copies may remain for a limited period until they are overwritten through normal backup cycles.
8. Security
TindaPOS uses authentication, row-level database access controls, private storage for subscription receipts, protected administrative access, secure HTTPS connections, and other technical safeguards. No online system can guarantee absolute security, so Store Owners should also use strong passwords and protect the devices they use to access the POS.
9. Your privacy rights
Subject to applicable Philippine data-protection law, you may have rights to be informed, access your personal data, correct inaccurate data, object to certain processing, request erasure or blocking where applicable, obtain data portability where applicable, seek damages, and file a complaint with the National Privacy Commission.
To make a privacy request, email baliguatjohnrey91@gmail.com. We may need to verify your identity before acting on a request.
10. Changes to this notice
This Privacy Notice may be updated when the service or its data practices change. Material changes will be reflected by updating this page and its effective date.