Privacy Policy

Akkad ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Akkad Inventory Management System (the "App").

By using our App, you agree to the collection and use of information in accordance with this policy.

Account Information:

• Email address (required for account creation and app functionality)
• Name (for user identification within organizations)
• Authentication data (when using Google or Apple Sign-In)

Business Data:

• Inventory items, categories, and stock information
• Customer information you choose to add
• Order details and transaction records
• Organization settings and preferences
• User roles and permissions within organizations

Technical Data:

• Device information for app functionality and license enforcement
• App usage data for service provision
• Error logs for app improvement
• Device identifiers to enforce subscription limits (one mobile device and one computer per user)

Camera Data:

• Barcode scanning for inventory management
• item photos (stored locally on your device unless you choose to upload)

Payment Information:

• Processed securely by RevenueCat (our payment processor)
• We do not store credit card or payment details on our servers

We use your information solely for:

• Service Provision: Enabling core app functionality including inventory management, order processing, and user authentication
• Account Management: Creating and managing your user account and organization membership
• Data Storage: Securely storing your business data on our servers located in Germany
• Customer Support: Responding to your support requests and technical issues
• Legal Compliance: Meeting our legal obligations and protecting our rights

We do NOT use your data for:

• Marketing or promotional purposes
• Analytics or tracking beyond essential app functionality
• Selling or sharing with third parties for commercial purposes
• Creating user profiles for advertising

We may share limited data with trusted third-party services only when necessary to provide and improve the app’s functionality.

Third-Party Services May Include:

• Payment & Subscription Providers (e.g., RevenueCat): To process subscriptions and payments
• Authentication Providers (e.g., Google, Apple): When you choose to sign in using these services
• Analytics & Performance Tools (e.g., Meta SDK, Firebase Analytics, or similar tools): To help improve app stability, performance, and user experience
• Crash Reporting & Diagnostic Tools: To identify and fix technical issues
• Shipping & Logistics Partners: To enable integrations you explicitly configure (only integration credentials are shared; no order or customer data is shared unless you choose to enable it)

How We Share Data:

• Only the minimum data required for each service is shared
• Data is used solely for operating, maintaining, improving, and securing the app
• We do not sell your personal or business data to anyone

Legal Requirements:

We may disclose information if required by law or when necessary to protect our rights, users, or platform security.

Secure Infrastructure:

• All data is stored on secure servers located in Germany
• We implement multiple security measures to protect our database
• Our hosting provider maintains enterprise-grade security standards
• All API communications use HTTPS encryption

Access Controls:

• Organization owners have full control over their organization's data
• Users can only access data based on permissions granted by organization owners
• We implement role-based access controls within organizations

Data Protection:

While we implement industry-standard security measures, no system is 100% secure. We continuously work to improve our security practices.

Immediate Deletion Policy:

• When you delete your account, all your personal data and business data is immediately removed
• When an organization is deleted, all associated data is immediately removed
• When a user leaves an organization, their data is immediately deleted
• We do not retain backup copies of deleted personal or business data

Limited Data Retention for Legal Compliance:

• Transaction records (payment history, subscription details) are retained for 7 years to comply with German accounting and tax laws
• These records contain only basic transaction information and cannot be used to access or reconstruct your business data
• Aggregated, anonymized usage statistics (which cannot identify individual users) may be retained for service improvement

Active Data:

• We only retain personal and business data while your account remains active
• Data is stored only as long as necessary to provide our services

Right to Deletion:

You can request immediate deletion of your personal and business data at any time by contacting us or using the in-app deletion features.

GDPR Rights (EU Users):

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your data
• Objection: Object to processing of your data

CCPA Rights (California Users):

• Know: What personal information we collect and how it's used
• Delete: Request deletion of your personal information
• Opt-Out: We don't sell personal information, so opt-out is not applicable
• Non-Discrimination: Equal service regardless of privacy choices

How to Exercise Rights:

Contact us at [email protected] or use the in-app account management features.

• Your data is primarily stored on our secure servers in Germany
• Limited data may be processed by RevenueCat for payment processing
• Authentication data may be processed by Google/Apple based on your sign-in choice
• All transfers are conducted with appropriate safeguards for data protection

Our App is designed for business use and is intended for users 18 years and older. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.

Camera Permission:

• Used exclusively for barcode scanning and item photography
• Photos are stored locally on your device by default
• You can choose to upload photos to our servers for backup and sharing with team members
• When uploaded, photos are stored on our secure servers in Germany
• We do not access your camera for any other purpose

Storage Permission:

• Used for importing/exporting data files
• Required for app functionality and data management

Network Permission:

• Required for app functionality and data synchronization
• All communications are secured with HTTPS encryption

Data Ownership:

• Organization owners have full control over all organization data
• Owners can grant specific permissions to team members
• Individual users can only access data based on assigned permissions

User Management:

• When users leave an organization, their data is immediately deleted
• Organization owners can manage user access and permissions
• Users can delete their own accounts at any time

We process your personal data based on:

• Contract Performance: Your email address and account data are necessary to provide our inventory management services
• Legitimate Interest: Technical data and error logs help us maintain and improve app functionality
• Consent: Camera permissions and optional features require your explicit consent

You can withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

This Privacy Policy is designed to comply with:

• General Data Protection Regulation (GDPR) - European Union
• California Consumer Privacy Act (CCPA) - California, USA
• Mobile app store requirements - Apple App Store and Google Play Store
• German data protection laws - Our primary jurisdiction

We regularly review our practices to ensure ongoing compliance with applicable privacy laws.

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last Updated" date at the top of this policy
• For significant changes, we will notify you through the app or via email
• Continued use of the App after changes constitutes acceptance of the new policy

We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have any questions about this Privacy Policy or our data practices:

• Email: [email protected]
• Response Time: We typically respond within 48 hours
• Data Protection Requests: Include "Privacy Request" in your subject line

Account Deletion vs. Subscription Management:

Deleting your account removes all your data from our systems but does not automatically cancel your subscription. Subscriptions are managed separately through RevenueCat and your app store. To fully terminate all services, you must both delete your account AND cancel your subscription through your App Store or Google Play settings.

For specific privacy rights requests, please provide:

• Your registered email address
• Description of your request
• Verification of your identity (for security purposes)