The short version
Your sales data stays on your device. Your menu, orders, open tabs, staff list and settings are stored on the terminal itself and are never uploaded to us.
We hold only what signing in needs — your email address, your display name, and your business and branch names.
We never sell your data, and we do not use it for advertising.
1. Who we are
MyBerniaga POS ("the app") is developed and operated by SMG Arctic Tech ("we", "us"). This policy explains what happens to information when you use the app.
By creating an account and using MyBerniaga POS, you agree to the handling of information described here.
2. What we collect
We keep the amount of information we hold deliberately small. This is all of it:
| What | Why we need it | Where it lives |
|---|---|---|
| Email address | Identifies your account so you can sign in and reset your password. | Firebase Authentication |
| Password | Protects your account. It is handled by Firebase Authentication and stored only in hashed form — we never see it. | Firebase Authentication |
| Display name | Greets you in the app and labels your account. | Firestore (users) |
| Business and branch name | Groups your terminals under one business and tells them apart. | Firestore (users, businesses) |
| Account role | Marks whether the account owns the business. | Firestore (users) |
| Usage events | Anonymous counts of which screens are opened and which actions are used, so we know what to improve. | Firebase Analytics |
| Crash reports | Diagnostics when the app fails — the error, the device model and OS version — so we can fix it. | Firebase Crashlytics |
What we do not collect
- Your menu, prices, orders, receipts, open tabs or sales history
- Your customers' names or any customer contact details
- Payment card numbers — the app does not process card payments
- Your device's location, contacts, camera roll, microphone or call data
- Your staff members' PINs in any readable form (see below)
3. Data kept on your device
Almost everything the app produces stays on the terminal and is never transmitted to us. That includes:
- Your menu catalog — items, order types, sizes, add-ons, remarks and prices
- Photos you choose for menu items, stored in the app's own folder
- The current cart, open tabs and your full order history
- Your tables, floor plan, areas and landmarks
- Your staff list, their roles and their screen permissions
- Printer setup, theme, service mode and other preferences
Staff PINs. PINs used to unlock the terminal are never stored as digits. Each is put through a one-way cryptographic hash with a unique random salt, so the stored value cannot be turned back into the PIN. They stay on the device and are never sent to us.
Because this data lives only on your device, we cannot recover it for you. If the device is lost, reset, or the app is uninstalled, that data is gone. Keep your own backups of anything you cannot afford to lose.
4. How we use your information
- To run your account — signing you in, keeping you signed in, and letting you reset your password.
- To keep the app working — diagnosing crashes and fixing bugs.
- To improve the app — understanding, in aggregate, which features are used and which are ignored.
- To answer you — replying when you contact us for support.
We do not use your information for advertising, we do not sell it, and we do not share it with data brokers.
5. Who we share it with
We share information only with the service providers that make the app work, and only to the extent they need it:
- Google Firebase (Google LLC) — provides authentication, the account database, analytics and crash reporting. Their handling of data is governed by the Firebase Privacy and Security documentation and Google's Privacy Policy.
We may also disclose information where we are legally required to — for example in response to a valid order from a court or regulator.
Firebase processes and stores data on Google's servers, which may be located outside Malaysia. Google maintains safeguards for such transfers.
6. How long we keep it
- Account details — for as long as your account exists, and deleted when you ask us to close it.
- Crash reports — retained by Firebase Crashlytics for up to 90 days.
- Analytics events — retained by Firebase Analytics for up to 14 months.
- On-device data — kept until you delete it in the app, clear the app's storage, or uninstall the app. This is entirely under your control.
7. Your rights
You may, at any time:
- Access the account information we hold about you.
- Correct it — your display name, business name and branch name are editable in the app.
- Delete your account and the information attached to it.
- Withdraw consent by closing your account and uninstalling the app.
- Complain to us, or to the relevant data protection authority, about how we have handled your information.
To exercise any of these, email smgarctictech@gmail.com from the address on the account.
8. Deleting your data
You can request deletion of your account and its data at any time. The account deletion page sets out exactly what is removed, what may be retained, and how long it takes.
To erase the data held on the terminal itself, uninstall the app or clear its storage in your device settings. That removes your menu, orders and staff list from the device immediately and permanently.
9. Security
Account sign-in is handled by Firebase Authentication over encrypted connections, and passwords are stored only as salted hashes. Staff PINs are hashed with a per-user random salt before being written to the device.
No system is perfectly secure. The terminal itself is an important part of your security: keep it locked with a device passcode, set a PIN for the business account before handing the app to staff, and remove staff access when someone leaves.
10. Children
MyBerniaga POS is a business tool and is not directed at children. We do not knowingly collect information from anyone under 13. If you believe a child has given us information, contact us and we will delete it.
11. Changes to this policy
We may update this policy as the app changes. The "last updated" date at the top will always reflect the current version, and material changes will be announced in the app or by email to the address on your account.
12. Contact us
Questions about this policy or about your data:
- Email: smgarctictech@gmail.com
- Developer: SMG Arctic Tech, Malaysia
- App: MyBerniaga POS (
com.smgarctic.myberniagapos)
We aim to answer within 5 business days.