SimpleSeller Privacy Policy

2.What SimpleSeller is

3.The short version: your data stays on your device

• SimpleSeller has no account and no sign-in.
• The app has no server of ours that it talks to. It does not send your records, your customers' details or your photos to us or to anyone else.
• The app contains no analytics, advertising, tracking or crash-reporting software of its own, and it does not read your advertising identifier. The one Google component that is built to report usage, the barcode scanner, has its network access removed (section 10).
• On Android, the app does not ask for internet permission at all.
• Data leaves your phone only when you choose to move it: by sharing, printing, exporting, copying, or opening a carrier's website. Section 7 lists every case.
• SimpleSeller does not send your data to any AI or other online service.
• Only your backup file is encrypted by the app. Your records database and other files rely on your phone's own protections (section 12).

4.The data the app handles

• Your business profile: business name, your business categories, your country or region (chosen in setup; the app suggests it from your phone's main language-and-region setting, which Android and iPhone give every app without any permission, and you can change it; it is used only to suggest a currency; it is not your location and the app never reads your location, GPS, IP address, time zone, SIM or carrier country), your business currency (any of the ISO currencies in the app's built-in list) and, if you choose to enter it, your own name (used only for the greeting on Home). If you choose an order-number prefix (up to four letters or digits), the app remembers it on your device and uses it when it numbers new orders.
• Your catalogue: products, variants (such as size or colour), SKUs, barcodes, costs, prices (each variant keeps the currency its price was recorded in), stock quantities, low-stock levels, categories, suppliers (with any note you type), brands, units, tags, product attributes, and product photos.
• Your stock history: stock received, sold, returned, damaged or adjusted, with any note you add.
• Your orders and money records: orders, the customer name you type (the customer name is optional; you can leave it blank, so some orders may hold no personal name at all), the order number (a reference made from your prefix, the date and a count for that day, or one you type yourself), order items and status history, receipts, and payments. A receipt shows the payments you have recorded and the balance still due. A "payment" is an amount you record yourself; the app does not take, process or check payments and has no field for card numbers. You can also complete a sale straight from New Order; that creates the same kind of order record and the stock change on your device.
• Your shipments and address labels: the recipient's name, organisation, postal address and (if you add it) phone number; your own ship-from address (often a home address for a small seller); carrier and service; package reference; tracking numbers you type, paste or scan; and the status notes you record yourself. The app does not look up or check any of this online.
• Your imports: when you import a file, the app reads it on your device. It keeps a history of each import (date and time, the file's name and type, counts, and for each row its row number, SKU and stock change) and the column names of file layouts it has seen, so it can match them next time. It does not keep the imported file. The app deletes the temporary copy made by the file picker as soon as the file has been read.
• Your settings: language (English, plus ten Beta languages that are draft translations; you choose it in setup or in Settings, and changing it never changes your country or currency), light or dark look, plan setting (the Free plan; this version has no paid plan and no way to buy one), whether you have finished setup, and which low-stock reminders you dismissed.
• Your acceptance record: when you accept the Terms of Service and Privacy Policy, the app saves on your device which versions you accepted, the date and time on your phone, and the app version. It holds no name, account or device identifier and is not sent to us. Because the record exists only on your device and Delete app data clears it, we cannot show a record of your acceptance after you delete it; the app asks you to accept the then-current Terms and Privacy Policy again.
• Files the app makes for you: CSV exports, receipt, packing-list and barcode-label PDFs, saved address labels, and your encrypted backup file. The fonts used to draw these PDFs (including Chinese, Arabic, Bengali and Devanagari characters) are inside the app; nothing is downloaded.
• Sample data: if you choose "Try the Demo Store", fictional sample records marked "Sample" are added to your device. They are not real people.

5.What we collect

6.Permissions the app asks for, and why

7.What leaves your device, and only when you choose

1. Share. CSV exports, receipts, packing lists, address labels, the import template and files of import rows with errors go to the app or person you pick in your phone's share sheet. The app shows a warning first when a file is not encrypted and names customers. Once shared, the file is in the receiving app's hands, not ours.
2. Print. The document goes to the printer you pick.
3. Copy and paste. "Copy tracking number" places the number on your clipboard. The app reads your clipboard only when you tap Paste on a tracking-number field.
4. Track on carrier website. For some carriers the app can open the carrier's own tracking page in your phone's browser. The only thing the link contains from your records is the tracking number, in the web address. Your browser then contacts that carrier, which receives the tracking number and the usual information a browser sends, as if you had typed the number on the carrier's site. The app itself contacts no carrier, and never opens a link found inside a scanned code. "Open carrier website" opens the page without a number.
5. Our legal and support links. Where a privacy, terms, support or deletion address is set in your copy of the app, tapping it opens that address in your browser, or opens your email app for support@ruzibagroup.com. Nothing from your records is added to those addresses.

8.Backups and exports

• Your encrypted backup. In Settings, Backup & Restore creates one backup file on your device, protected by a password you choose (at least 10 characters). It is encrypted with Argon2id key derivation and AES-256-GCM. We cannot recover the password or the file. It contains your records and business profile (including your country or region, currency and the currency recorded with each price), not the photo images. The app gives you no way to move or share the backup file, and you can restore only from that file on that device, so it does not protect you if the phone is lost or the app is deleted. Uninstalling removes it.
• Exports are not encrypted. CSV files and PDFs you create are ordinary files. Anyone who gets a copy can read it.
• Your phone's own backups. SimpleSeller asks Android and iOS to keep its records, photos and files out of cloud and computer backups: on Android all app data is excluded from cloud backup and device-to-device transfer; on iPhone the app's records, photos and files are excluded from iCloud and computer backups. On iPhone, iOS still backs up a small set of the app's settings: your language, light or dark look, plan setting, whether setup is finished, your business name, categories, country or region and currency, your order-number prefix, and your own name if you entered them. No product, order, customer or shipment record is among them.

9.Device authentication

10.Third parties

• Software inside the app. The app is built with open-source and platform libraries that run only on your device (for example for the database, PDF creation, printing, sharing, barcode scanning and reading import files). Appendix A lists them. None of them is used to send your data anywhere. Some libraries contain internet-capable code that the app never uses; on Android the internet permission is not requested at all.
• Barcode scanning on Android uses Google's ML Kit barcode model, bundled in the app. Google documents that ML Kit, by default, collects device and app information, a per-installation identifier and performance and error data, and sends it to Google for diagnostics and usage analytics. SimpleSeller's Android release build is configured so that this information is not sent from the app: the internet permission and ML Kit's usage-reporting transport are removed, and a build check fails if they come back. We check this on each release; if we ever find that a release could send it, we will update this section and the store disclosure before that release. The barcode picture is read on your device and is not kept or sent.
• Carriers only see a tracking number if you open their tracking page yourself (section 7).
• Apple and Google. If you download SimpleSeller from the App Store or Google Play, or test it through TestFlight, Apple or Google process your download and, depending on your device settings, may collect their own diagnostics or usage information under their own policies. We do not control that. If you have chosen to share app diagnostics with developers, Apple or Google may make crash or usage reports available to us. For Google Play, we can see Android vitals (crash and not-responding reports) and usage statistics such as active-user counts in the Play Console. These are Google's platform-managed reports based on people's device settings, not data sent by SimpleSeller, which contains no analytics or crash-reporting software of its own.
• Where you send things. Email apps, messaging apps, cloud drives and printers you choose are outside our control.

11.How long data is kept, and how to delete it

• Data stored by the app stays on your device until you delete it, use Delete app data, or remove the app, according to how your phone handles removing apps. The app deletes nothing on a schedule. There is no way to delete a single product, order or receipt in this version; a shipment can be deleted on its own before it is marked shipped. There is no way to restore a deleted record; keep your own backups.
• Exports and backups you create (CSV files, PDFs, labels, the backup file, and anything you share or print) stay wherever you saved or sent them until you delete them there.
• RUZIBA servers hold nothing. We have no server for your records, so we do not keep a copy and there is no retention period on our side. (Emails you send to support are covered in section 5.)
• To delete your data in the app: open the More tab, tap Data Management, tap Delete app data, read the message, and tap Delete app data again. This permanently deletes from the device your products, variants and product photos, stock movements, orders (including customer names), receipts and payments, categories, suppliers, brands, variant types, units, tags and product attributes, defaults for new products, import history and remembered column matches, shipments with their addresses and tracking numbers, your ship-from address and shipping setup, your business name, categories, country or region, currency, order-number prefix and your own name, and every CSV and PDF file the app saved, including saved address labels, and your record of accepting the Terms of Service and Privacy Policy (you are asked to accept them again). It also clears the app's temporary copies. It cannot be undone, and the app returns to setup.
• What Delete app data does not remove: your encrypted backup file (the app tells you so before you confirm; uninstall the app to remove it); your approved-language, light/dark and plan settings; copies you already shared, sent or printed; and an earlier iPhone backup you made yourself, which can still hold the small settings listed in section 8.
• Uninstalling the app removes everything it stores on the device, including the backup file.
• There is nothing for us to delete. Because there is no account and we hold no copy of your records, we cannot look up, restore or delete your records for you. We can answer questions about this policy at support@ruzibagroup.com.

12.Security

• Your records are stored in the app's private storage, which your phone's operating system protects from other apps. SimpleSeller does not itself encrypt your records database, settings, product photos or exported files. They rely on your phone's own protections, such as its screen lock and storage encryption.
• The backup file is the one thing the app encrypts, with a password only you know. It does not follow that "everything on your device is encrypted by SimpleSeller": it is not.
• The app is protected by your phone's own authentication (section 9).
• Anyone who can unlock your phone, or who gets a file you shared, can read what it contains. Please keep your phone locked and your backup password safe.
• No system is perfectly secure, and we cannot promise otherwise.

13.Children

14.Your choices and rights

15.International notes

16.Changes to this policy

17.Contact

Appendix A: software that runs on your device