Privacy Policy for Offline Shop

Last Updated: October 13, 2026

BinaryScript Private Limited ("we," "us," or "our") operates the Offline Shop mobile application (the "App"). This Privacy Policy explains how we handle information when you use our App.

Company Information:
BinaryScript Private Limited
India
Email: support@binaryscript.com

1. Introduction

We are committed to protecting your privacy. Offline Shop is designed as an offline-first application that stores all your business data locally on your device. We do not collect, store, or have access to your business data, including your inventory, orders, customer information, or product details, unless you turn on cloud backup (section 2.4).

2. Information We Collect

2.1 Analytics Data (Firebase Analytics)

We use Firebase Analytics to understand how users interact with our App. This includes:

• App usage events (e.g., app opens, screen views, button clicks)
• Device information (e.g., device model, operating system version)
• General location (country/region level only, not precise location)
• Session duration and frequency of use

We look at this data in aggregate to understand how the App is used. It is not linked to your identity, except that for PhonePe subscribers in India (section 2.3) our backend links the Firebase app instance ID to their account.

2.2 Crash Reports (Firebase Crashlytics)

We use Firebase Crashlytics to identify and fix crashes and bugs. When the App crashes, we automatically collect:

• Device information (model, OS version, free memory, storage)
• App version and crash logs
• Technical diagnostic information

This information helps us improve app stability and performance. No personal or business data is included in crash reports.

2.3 Account, Location and Subscription Data (India, PhonePe Subscribers Only)

This applies only to users in India on Android who subscribe through PhonePe (UPI AutoPay). To subscribe, you sign in to the BinaryScript backend (api.binaryscript.com) with your Google or Apple account. Everyone else is unaffected: nothing is sent to our backend. Signing in for cloud backup (section 2.4) does not send anything to our backend either.

For these users, our backend stores, linked to your account:

• Your sign-in identity: your name and email address from your Google or Apple account, and your account identifier
• Device and app details: platform, operating system and version, app version and build, country and language
• Approximate location: state, state code, city, country, country code and an approximate latitude and longitude, worked out from your device's IP address. The App does not use GPS and does not ask for location permission. The lookup is done by BigDataCloud's reverse-geocoding service, which sees your IP address for that request. The location is saved once, at sign-in or app start, and is never overwritten.
• Your Firebase Analytics app instance ID, which our backend uses to report subscription events (trial started, payments, cancellations) to Google Analytics and Google Ads
• Your subscription: the PhonePe order, mandate and payment status

We use this data for subscription and payment processing, fraud prevention, and analytics and ad measurement. To have it deleted, email support@binaryscript.com from your account's email address (see How to Delete Your Account).

2.4 Cloud Backup (Optional, Premium)

Cloud backup is an optional premium feature, available in every country on Android and iOS. If you use it:

• Sign-in: you sign in with Google or Apple through Firebase Authentication, which keeps your account's email address, name and a user identifier (uid).
• What is backed up: your business data (shop details, products, customers and orders) and your product images.
• Where: in Firebase Storage (Google Cloud), in a folder that belongs to your account.
• Encryption: each backup is encrypted on your device before upload (AES-256, with a key derived from your account's user identifier). This protects the backup while it is stored. It is not end-to-end encryption.
• How long: a backup stays until you delete it in the App's backup screen, or until we delete your account at your request.
• Signing in for backup does not send anything to the BinaryScript backend (api.binaryscript.com).

2.5 What We DO NOT Collect

3. Local Data Storage

4. Third-Party Services

4.1 Firebase (Google)

We use Google Firebase for analytics and crash reporting, and, if you use cloud backup, for sign-in (Firebase Authentication) and backup storage (Firebase Storage). Firebase may collect and process data according to their privacy policy:
https://firebase.google.com/support/privacy

4.2 Google Play Services

Our App uses Google Play Services for:

• In-app purchases and subscriptions
• App distribution and updates

Your payment information is processed by Google Play and subject to Google's privacy policy:
https://policies.google.com/privacy

We do not have access to your payment information, credit card details, or billing address.

4.3 PhonePe (India)

Subscriptions in India can be paid by UPI AutoPay through PhonePe. PhonePe processes the payment; we receive the order, mandate and payment status, never your bank account or UPI PIN details:
https://www.phonepe.com/privacy-policy/

4.4 BigDataCloud

For PhonePe subscribers in India, BigDataCloud's reverse-geocoding service turns the device's IP address into the approximate location described in section 2.3:
https://www.bigdatacloud.com/privacy-and-cookie-policy

4.5 Google Analytics and Google Ads

For PhonePe subscribers in India, our backend reports subscription events, using the App's Firebase app instance ID, to Google Analytics and Google Ads to measure our advertising:
https://policies.google.com/privacy

5. How We Use Collected Information

We use the analytics and crash data collected to:

• Improve app performance and stability
• Understand which features are most used
• Identify and fix bugs and crashes
• Make informed decisions about new features
• Improve user experience

For PhonePe subscribers in India, we use the account, location and subscription data in section 2.3 for subscription and payment processing, fraud prevention, and analytics and ad measurement.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your information to third parties.

We may share anonymous, aggregated analytics data with:

• Firebase/Google (as part of their services)
• App performance monitoring tools

For PhonePe subscribers in India, data is also processed by the service providers in section 4 (PhonePe, BigDataCloud, Google Analytics and Google Ads), only for the purposes in section 2.3.

We may disclose information if required by law or to:

• Comply with legal obligations
• Protect our rights and property
• Prevent fraud or security issues
• Protect user safety

7. Data Security

We take data security seriously:

• All business data is stored locally on your device
• We use industry-standard security practices
• Firebase connections are encrypted
• We do not store your business data on the BinaryScript backend; if you use cloud backup, an encrypted copy is kept in Firebase Storage
• Regular security updates are provided

8. Data Retention

Analytics and crash data collected by Firebase is retained according to Google Firebase's data retention policies (typically 2-14 months, configurable).

Cloud backups stay in Firebase Storage until you delete them in the App's backup screen. For PhonePe subscribers in India, the account, location and subscription data in section 2.3 is kept while the account exists. To delete your account and its data (the backend account record, approximate location, subscription records, cloud backups and the sign-in account), email support@binaryscript.com from your account's email address; we delete it within 30 days, except records we must keep by law. See How to Delete Your Account.

Your local business data remains on your device until you:

• Uninstall the App
• Clear app data
• Delete specific records within the App

9. Your Rights and Choices

You have the right to:

• Use the App without signing in (sign-in is needed only for cloud backup and for the PhonePe subscription in India)
• Delete your cloud backups at any time from the App's backup screen
• Ask us to delete your account and its data by email (see How to Delete Your Account)
• Keep all your business data local on your device, by not using cloud backup
• Opt-out of analytics (through device settings for ad tracking)
• Delete all app data by uninstalling the App
• Contact us with privacy concerns

10. Children's Privacy

Our App is not intended for children under 13 years of age. We do not knowingly collect information from children. The App is designed for business owners and retail shop operators. If you believe a child has used our App, please contact us.

11. International Data Transfers

Firebase Analytics and Crashlytics may transfer and process data in countries outside of India, including the United States, in accordance with Google's privacy practices.

Your local business data never leaves your device, unless you use cloud backup: encrypted backups in Firebase Storage may be stored outside India.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Updating the "Last Updated" date
• Posting a notice in the App
• Sending a notification through the App

Continued use of the App after changes constitutes acceptance of the updated policy.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). Unless you sign in (for cloud backup, or for the PhonePe subscription in India), we do not collect personal information that identifies you. You may contact us with questions or requests.

14. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your data
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object

Your business data is stored locally on your device, so you have full control over it, and you can delete it by uninstalling the App. Cloud backups can be deleted at any time from the App's backup screen. To delete your account and its data, email support@binaryscript.com from your account's email address (see How to Delete Your Account).

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

BinaryScript Private Limited
Email: support@binaryscript.com
Response Time: Within 30 days

16. Consent

By downloading, installing, and using the Offline Shop application, you consent to this Privacy Policy and agree to its terms.