OwóBook Privacy Policy

1. Who we are

OwóBook is run by OrbisLabs Ltd ("we", "us"). We decide how the account and shop data described in this policy is used. You can reach us at Ibn.abdulwahabu@gmail.com.

2. Information we collect

From you, the shop owner

• Your account: your email address and a password, or your Google account if you choose Google sign-in. We never see or store your password ourselves; Firebase Authentication handles it. Your account also has a unique ID that links it to your shop.
• Your shop: business name, phone number, an optional logo photo, bank account number, bank name and account name (which defaults to your business name), your invoice counter, and when the shop was created.
• Your item catalog: each item's name, barcode (scanned or typed) and price.
• Your invoices: invoice number; the customer's name and phone number; each line (item name, code, quantity, unit price); subtotal, discount and total; whether it was paid now or on credit; paid or unpaid status; due date; and the dates it was created and paid.

About your customers

You type in your customers' names and phone numbers, or pick them from your phone's contacts (only the contact you choose). Your customers do not use OwóBook, have no account, and we do not contact them or use their details for advertising.

You are responsible for having the right to keep your customers' details in OwóBook and to send them receipts. For example, you should tell your customers you record their name and phone number, and only record what you need. We store this information for you so you can run your shop.

Collected automatically by services inside the app

OwóBook itself has no analytics or crash-reporting tools. Some services it uses collect technical data when the app runs (see Section 4): advertising and device information for ads, your IP address and an installation identifier for Firebase, device and performance information for barcode scanning, and your IP address when the app downloads fonts. OwóBook does not ask for your location, although advertising services may estimate your general location from your IP address.

Stored on your phone

To work smoothly, the app keeps a cached copy of your shop data on your device. When you save an image or PDF to share, the app also writes it to your device's temporary storage first. That file can include your customer's name and phone number and your bank details. It stays there until your phone clears it or you uninstall the app.

3. How we use your information

• To run your account and the app: sign you in, save and show your invoices, customers, items and ledger, and build the receipts and statements you share.
• To show ads that keep the app free (Section 5).
• To keep the service secure and prevent abuse.
• To answer you when you contact us for support or make a request.
• To meet our legal obligations.

We don't send your shop data to advertisers. The app doesn't pass any of your shop, customer or invoice information into ad requests.

We may technically be able to access the database that stores your data, because we administer it. [TO CONFIRM: when OrbisLabs staff may open a user's shop data, for example only to fix a fault you report or when the law requires]

Under the Nigeria Data Protection Act 2023 we rely on these grounds: to provide the service you signed up for (contract); your consent, where we ask for it (ad consent, and device permissions such as camera and contacts); our legitimate interest in keeping the service secure and funded through ads; and legal obligations.

4. Third-party services

These services run inside the app. Each handles data under its own privacy policy.

We don't control how these providers use data beyond what we configure. Please read their policies for details.

5. Ads and your choices

OwóBook is free and supported by ads from Google AdMob. You will see:

• banner ads at the bottom of several screens;
• full-screen ads at natural pauses, such as after you send or save a receipt or statement, mark an invoice paid, or leave a receipt. These appear at least three minutes apart;
• an ad when you return to the app after leaving it.

Ads may be personalized using your device's advertising ID. [TO CONFIRM: the consent messages are published in the AdMob “Privacy & messaging” settings]

• Where consent is required (currently the EEA, the UK and some US states, as decided by Google's consent tool), the app shows Google's consent message first and does not request any ad until you have made your choice. You can change it later under Shop → Ad privacy settings, which appears where it applies.
• Elsewhere, including Nigeria, the app does not show a consent message. You can control personalization on your device. On Android, go to Settings → Google → Ads to opt out of personalization or delete your advertising ID. On iPhone, go to Settings → Privacy & Security → Tracking.
• iPhone: OwóBook does not show Apple's tracking prompt, so ads on iPhone are served without your advertising identifier.

You can also visit adssettings.google.com to manage how Google personalizes ads.

6. Permissions and why we ask

• Camera: to scan item barcodes when you add an item and when you add items to an invoice. The app reads only the barcode number; it does not save or upload camera images.
• Photos: to let you choose a shop logo when you set up your shop. Only the one photo you pick is used, and it is uploaded to your shop's storage.
• Contacts: only when you tap Choose from contacts while adding a customer. The app opens your phone's contact picker and copies the name and phone number of the contact you choose into the form. Nothing is saved to OwóBook unless you save the customer.
• Internet: to sign you in and save and load your data.

You can turn any permission off in your phone's settings. You can still type items and customers by hand.

7. Sharing and disclosure

When you share, you decide. Data leaves the app to a customer or another app only when you tap one of these:

• Send via WhatsApp: opens a WhatsApp message with your shop name, receipt number, date, items, total and your bank details. The customer's phone number is used to open their chat.
• Save image: creates a picture of the receipt (shop name, phone, logo, customer name and phone, items, total and bank details) and opens your phone's share sheet.
• Export or send a statement: creates a PDF (shop name, customer name and phone, invoice list, totals) and opens the share sheet.

After you share, the app you chose (for example WhatsApp) handles the data under its own policy, and we cannot take it back.

We also share data only with:

• The service providers in Section 4, to run the app.
• Authorities, if the law, a court or a valid government request requires it.
• A successor, if OwóBook is sold or merged. We will tell you about any change in who holds your data.

We do not sell your personal information. Other OwóBook users cannot see your shop, customers, items or invoices. One exception: your shop logo is not private. Other signed-in OwóBook users can technically read logo files, and the logo appears on receipts you share.

8. International transfers

Your data is stored with Google Firebase. [TO CONFIRM: Firestore database location] [TO CONFIRM: Cloud Storage bucket location] Google and its advertising and scanning services may also process data in other countries, including outside Nigeria. Where the law requires safeguards for this, we rely on those Google provides in its terms for Firebase and its advertising products.

9. How long we keep your data

• While your account exists, we keep your data so the app works. You can delete an item in the app. Customers and invoices stay until you delete your whole account or ask us to remove them.
• If you delete your account, the app immediately deletes your invoices, customers, items, logo, shop details, account record and sign-in account (see how to delete your account). [TO CONFIRM: how long Google keeps backup copies after deletion]
• Inactive accounts are not deleted automatically at the moment. You can delete yours at any time.
• On your phone, uninstalling the app removes its local data.
• Anything you already sent by WhatsApp, image or PDF stays with the people and apps that received it.

10. Security

• Data moves between the app and Google's servers over encrypted connections (HTTPS/TLS).
• Google Cloud encrypts data it stores by default.
• Access rules on the database allow only the signed-in owner of a shop to read or change its customers, items and invoices. [TO CONFIRM: the deployed Firestore and Storage rules match the project's firestore.rules and storage.rules]
• Deleting your account needs you to confirm it is you, with your password or your Google account.

No system is 100% secure. Please keep your phone and password safe, and put on receipts only the bank details you are happy to share.

11. Your rights

Under the Nigeria Data Protection Act 2023 you have the right to be informed about how we use your data, to access it and get a copy, to correct it, to have it erased, to restrict or object to how we use it, to move it (data portability), to withdraw consent, and not to be subject to decisions made only by automated means. We make no such decisions.

• Correct: you can edit your bank details, customers and items in the app. To correct your business name, phone number or logo, email us.
• Delete: use Shop → Delete account, or email us if you cannot sign in.
• Withdraw consent: change ad choices as described in Section 5, and turn off camera, photos or contacts in your phone's settings.
• Access or a copy: email us from the address on your account. We may ask you for details to confirm it is you, and we will reply within 30 days.

If you are a shop's customer and want to see, correct or delete details a shop owner entered, please ask the shop first. You can also email us and we will help.

You may complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

12. Children

OwóBook is for adults who run a business. It is not for anyone under 18 and is not directed at children. If we learn that an account belongs to a child, we will delete it. If you think that has happened, email Ibn.abdulwahabu@gmail.com.

13. Changes to this policy

We may update this policy. We will change the "Last updated" date above and, for significant changes, tell you in the app or on the store listing.

14. Contact us

OrbisLabs Ltd

Email: Ibn.abdulwahabu@gmail.com