Privacy Policy

Who this policy covers

This policy covers the Florin point of sale app on Windows, macOS, Linux, Android, and iOS, and the Florin website at florin.yocoolmate.com.

The store that installs Florin owns the business records it holds: sales, inventory, staff accounts, and any customer details the store chooses to enter. Florin provides the software that stores and syncs those records on the store’s own devices.

The app has no account with us

The point of sale app does not ask you to create an account with us, and it does not send store records to us. Staff logins and PINs are created by the store and stay on its devices. There are no ads and no analytics run by us inside the app.

Data stored on your device

The Florin app keeps its database in the app’s private storage on the device it runs on. That database can include:

• Store settings such as name, address, phone, receipt, printer, and label configuration
• Products, prices, categories, barcodes, product photos, and stock levels
• Sales, refunds, receipts, discounts, payment method labels, and cheque or banking records
• Staff accounts and roles, with passwords and PINs stored only as salted hashes
• Customer names, phone numbers, notes, and balances, when a store chooses to record them

Syncing between devices in the store

Florin devices in the same store find each other on the local network and exchange store records directly, device to device. This traffic stays on the local network and does not pass through our servers.

Devices prove they belong to the same store with a shared store key before any records are exchanged. The records themselves travel over the local network without encryption, so anyone with access to that network could observe them. Run Florin on a network you trust, such as a private, password-protected store Wi-Fi.

Backups

Florin makes regular backup copies of the store database. Every copy stays under your control and none of them is sent to us.

• Local backups: kept in the app’s storage on the device.
• Android Download folder: on Android, nightly copies are also saved to Download/Florin on the device so they survive an uninstall. You can copy or delete them with any file manager.
• Android Auto Backup: on Android, if backup is turned on in your device settings, Android saves one copy of the store database to your own Google account backup and restores it when you reinstall. Images and the local backup folder are excluded.
• Google Drive backup (optional, Android and desktop): off until you connect a Google account in Tools > Backup. Florin then uploads a compressed copy of the store database once a day to a Florin folder in your own Google Drive. It asks only for the drive.file permission, which lets it see and manage just the files it created. You can disconnect in the app or revoke access from your Google account at any time.
• Files you export yourself are saved wherever you choose.

Camera and photos

Florin uses the camera only when you choose to scan a barcode or take a photo for a product. It uses the photo library or the system file picker only when you pick an image for a product. Photos are saved in the app’s private storage on the device and are not uploaded by us.

On Android, camera barcode scanning uses Google ML Kit. The image is processed on the device, but ML Kit sends Google diagnostic and usage information such as device model, operating system version, app package name and version, performance metrics, and error codes. Google describes this at https://developers.google.com/ml-kit/android-data-disclosure.

Online features you choose to use

The app works offline. A few features reach the internet only when you use them, and they talk to the service named here, not to us:

• Product image search sends the product name, brand, category, or barcode you are searching for to Open Food Facts, Digikala, Torob, Wikimedia Commons, and DuckDuckGo, and downloads the image you pick.
• Adding an image from a web address downloads it from that address.
• The store location map loads map tiles from OpenStreetMap and marker images from unpkg.com.
• Card terminals receive the sale amount from the device. Some payment providers’ terminals are reached through that provider’s own online service, using the credentials the store enters.
• The desktop app checks florin.yocoolmate.com for app updates. The request carries the app version and normal network details such as your IP address, never store records. Apps installed from the App Store or Google Play do not check for updates themselves.

Device permissions

Network, Wi-Fi state, and local multicast access exist to find the other Florin devices in the same store and sync with them. Local network access on iOS is used for the same purpose. Camera and photo access are covered above. None of these is used to identify or locate you.

Website accounts

Accounts on florin.yocoolmate.com are optional and separate from the point of sale app. You can sign in with email and password, a passkey, a Google account, or Sign in with Apple.

• Your name and email address. With Google or Apple we receive the name, email address, and profile image the provider shares. With Apple you can choose to hide your email, in which case we receive a relay address.
• Your sign-in method: a salted hash of your password, the public key of a passkey, or the link to your Google or Apple account. We never receive your Google or Apple password.
• Session records, including the IP address and browser user agent of each signed-in session, and the session cookies that keep you signed in.
• Your role on the site, such as admin or user.

What Florin does not do

• No advertising, advertising identifiers, or ad profiling
• No analytics or behavioural tracking run by us, in the app or on the website
• No location tracking
• No sale of personal data to anyone

Retention and deletion

Store data stays on the store’s devices until the store deletes it. To remove it from a device, uninstall the app or clear the app’s storage in the device settings. On a device paired with others, Tools > Sync > Erase this device and start over also clears the store database; it keeps one safety copy in the app’s local backups, which uninstalling removes. Repeat this on each device in the store.

Copies outside the app are yours to delete: the Download/Florin folder on Android, the Florin folder in your Google Drive, your Android device backup in your Google account, and any files you exported.

Website account data is kept while your account is open, and a session ends when you sign out or after a year without use. See the Delete Account page to close your account.

Your rights

You can ask for a copy of the account data we hold, ask us to correct it, or ask us to delete it. Where the law gives you the right to object to or restrict processing, or to lodge a complaint with a data protection authority, you keep those rights.

Write to yocoolmate+florin@gmail.com and we will answer within 30 days.

Children

Florin is a tool for retail businesses. It is not directed at children and we do not knowingly collect data from anyone under 13. If you believe a child has given us personal data, contact us and we will remove it.

Changes to this policy

If this policy changes in a way that affects what we do with your data, we will update this page and the date at the top of it before the change takes effect.

Contact

Questions about privacy: yocoolmate+florin@gmail.com