Privacy
In plain language: what we keep, why, and your rights.
Last updated 24 October 2026
This explains what ShopFlow collects, why, and what you can ask us to do with it. In short: we collect what is needed to run your shop's records, we keep it safe, and we never sell it.
In the app
- Your account: your name, email address and password (stored scrambled, never readable by us). Your 4-digit PIN stays on your phone.
- Your shop's records: products, prices, stock, sales, expenses, customers and their balances, staff and receipt details. They are saved on your phone and backed up to our servers so they can be restored and shared with the staff you invite.
- Your customers: if you keep customer accounts, you add their names and phone numbers. You are responsible for having their permission; we only store them for your shop.
- Only you and the staff you invite can see your shop's records. Staff cannot see cost prices or profit.
On this website
- Visits: we use Cloudflare Web Analytics, which counts visits without cookies and without following you to other sites.
- Downloads and video links: when you tap Download or open one of our video links, we record the time, the app version, which of our videos or posts sent you, and your country. We do not keep your IP address. To count each person once a day, we keep a code made from your connection that changes every day and cannot be turned back into who you are.
- One small cookie: if you arrive through one of our video links, a cookie remembers which link for one day, so we know which videos help people. It holds nothing else.
Who handles it for us
- Supabase stores accounts and backups, on servers in Ireland (European Union).
- Cloudflare runs this website, the downloads and the receipt page.
- Resend sends account emails, such as password reset codes.
They only process data to provide these services to us.
Receipts
A QR receipt carries the receipt inside the link itself. When a customer opens it, the receipt is shown and saved on their own phone; it is not sent to us.
How long we keep it
As long as your account is open. Your shop's records are business records, so we keep them until you ask us to delete them.
Your rights
You can ask us for a copy of your data, to correct it, or to delete your account and your shop's records. Email [email protected] from your account's email address. We will answer within 30 days.
Changes
If we change this policy we will update the date at the top, and tell you in the app if the change matters.
Contact
ShopFlow, Zimbabwe. Email [email protected].