Scope and responsibility
ShopFlow POS is business-record software provided under the MatechMatrix name. This policy covers the application and this product website. A shop using ShopFlow decides which customer, supplier, guarantor and transaction records it enters, and is responsible for having an appropriate reason and authority to use that information.
Business records on your device
The app stores inventory, IMEI records, sales, purchases, payments, balances, expenses, repairs, installments, committee records, notifications, settings and selected images locally. Depending on the workflow, records include names, phone numbers, addresses, identity-document information and financial amounts. These records are not a continuously synchronized shared cloud ledger. A device PIN or biometric lock does not mean that the whole business database is encrypted.
Account and device access
Firebase Authentication and Firebase Realtime Database support sign-in, account and licence administration, device recognition and session control. This involves account identifiers, authentication tokens, licence/access status, device name/platform, a device-recognition identifier, session timestamps and messaging tokens where used. Android device recognition uses a hashed, app-scoped Android identifier; it is not the shop inventory IMEI field. Initial sign-in and periodic access validation require an internet connection. Editing and viewing access have different renewal periods.
Google Drive, local backups and sharing
You choose whether to connect Google Drive. The app requests selected app-file access through drive.file and basic email identity for the connected account. Database and media backup payloads are encrypted with an automatically generated secret. The recovery key is stored separately in your connected Drive account; access to that Google account can therefore recover the key. This does not protect backups against compromise of that account. Local backup ZIP files are not encrypted. Exports, receipts and images go to recipients or apps you choose when sharing or printing. Restore replaces selected local business state and can replace newer records; it is not a live merge.
Diagnostics and AI
The Android app uses Firebase Crashlytics for fault diagnostics, including app/device information, error messages and app logs. Usage Analytics and advertising-identifier collection are disabled, and the Analytics dependency is not included. Before an Android cloud-AI request, the app asks you to allow Google Gemini processing for that account during the current app session. Only an affirmative choice permits the provider to receive prompts and tool-supplied shop context. Cancelling sends no AI request and leaves manual work available. AI processing can include inventory, sales, customer identifiers and payment or installment context. Only submit information you are authorized to use.
Permissions and choices
Camera access supports capture and scanning. System photo/file pickers grant access to the files you select, without broad photo-library or storage permissions. Nearby-device/Bluetooth permissions support printer discovery and connections. On Android 11 and older, discovery requires location permission; on Android 12 and newer the app requests Nearby devices without location and does not derive physical location from scans. Notifications can be enabled through the inbox when you choose. Background network work supports backups. You can change permissions in device settings; denial can limit the related operation while other shop work remains available. The USER manifest does not request SMS, call-log or phone-contact access.
Storage, retention and deletion
Local business records, exported files, your Drive backups and the remote account/licence records are separate copies. Local records and exports remain on the storage you use until removed there; Drive copies remain in the connected account until removed through its controls or the applicable backup workflow. Account and licence data supports access, security, administration and resolving account matters. To request access, correction or deletion of information controlled by MatechMatrix, contact the channel below with your account email and request. Ownership must be verified. Explain which copies the request concerns; removing an account does not automatically erase shop records on every device or files shared with other people. Any necessary legal retention must be explained when handling the request.
Website, security and updates
This static website has no advertising or website analytics scripts and does not take payments. Its hosting provider processes network requests needed to serve pages. A local contact draft is not sent unless you choose a separate communication channel. Google, your chosen sharing apps and the host have their own privacy terms. Protect devices, passwords, backup files and identity records. No storage or transmission method is absolutely secure. ShopFlow is intended for business operators, not children. We update this policy when the described handling changes.
Contact the operator
Akbar Amin trading as MatechMatrix
Karachi, Pakistan