What we store, and what never leaves your phone.

Billoren is a billing app for shops. This page says exactly what it stores, what leaves your phone, and how to get rid of it all. It is short because the app does little with your data.

What stays on your phone

Everything you type into the app: bills, items, prices, stock counts, customer names and numbers you add, credit balances, expenses and reports. It is kept in a database on the phone itself, encrypted with a key held in the Android Keystore. The app is excluded from Android's automatic cloud backup, so none of it is copied to a Google account.

Backups you make yourself through Settings are written unencrypted so they can be restored on a different phone. The app tells you this on the screen where you make one. Where that file then goes — WhatsApp, Drive, a memory card — is your choice, and anybody who gets hold of it can read it.

What leaves your phone

Only two things, and only when you sign in or the app checks your plan:

• Your account details — the name, email address, mobile number and shop name you gave us when you signed up. We need these to know whose plan is whose and to ring you about payment.
• Which phone is signed in — a device identifier the app generates, the phone model, the Android version and the app version. This is how a plan is limited to the number of phones it covers, and how we can tell you which phone is using your account when you ring us to change it.

That is the whole list. No contacts, no location, no photos, no advertising identifier. The camera is used for scanning barcodes and the image is never stored or sent anywhere.

Backing up to your own Google Drive

If you turn this on in Settings, the same backup file described above is copied into a folder named Billoren that the app creates in your own Google Drive. This is on top of, not instead of, the copy kept on your phone.

The app asks Google for a narrow permission called drive.file, which only lets it see and write the files it creates itself — it cannot browse, read or change anything else already in your Drive. Nobody at Billoren can read this backup; it goes straight from your phone to your Google account over a connection Google controls, and it carries the same business data as the local backup (bills, stock, customers, credit).

Turning this off, or removing the app's access from your Google account settings, stops future backups. Files already copied to your Drive stay there until you delete them yourself.

Why we hold it

To run your account: to let you sign in, to know when your plan ends, and to contact you about payment, renewal and support. We do not sell it, and we do not use it for advertising. We do not share it with anyone except the services we need to run the product — our own server, and an email provider to send you codes and receipts.

How long we keep it

For as long as you have an account with us, and for a short period afterwards where the law requires us to keep records of a sale. Delete your account and the personal details go, as below.

Deleting your account

You can do this yourself, from inside the app:

• Settings → Delete my account.

That removes your details from our servers and erases the app's database from the phone in the same step. It cannot be undone, and it takes your bills, stock and credit with it — so take a backup first if you want to keep them.

If you cannot open the app, write to support@billoren.com from the address you signed up with and we will delete it for you.

Children

Billoren is a tool for running a business and is not meant for children.

Changes

If this policy changes we will update this page and the date at the top. If a change means the app starts sending something new, we will tell you in the app before it does.

Contact

Billoren — support@billoren.com