Privacy Policy: MOJO Supermarket

Last updated: 2026-10-18 (optional online copy added). Publisher: MojoDev Studios. Contact: info@mojostudios.tech.

In short: your shop's data (items, sales, customers) lives on your phone and the app works fully without an account. If you choose to sign in with Google (an optional Pro feature) we keep a copy on our server so you can see it on the web and so it survives a lost phone; you can delete it at any time. No ads, and we do not sell or share your data.

1. Data you enter

Items, prices, costs, stock and expiry dates; sales and purchase invoices; customer and supplier names, phone numbers and balances; cashier names; and shop details (name, address, phone, tax number if you enter them). It is saved in the app's private files on your device. PINs are stored as salted hashes, not as text. While you have not signed in to the optional MOJO online account, we, the developer, do not receive this data: the app does not send it to any server. You own your shop's and your customers' data. If you sign in, see section 5.

2. Permissions and why

• Camera: to scan barcodes only. Images are not saved or sent.
• Nearby devices / Bluetooth: to connect to the receipt printer paired with your phone.
• Notifications: for one daily reminder about open suggestions. You choose it and can turn it off any time.
• Run at startup: so the reminder is set again after the phone restarts.
• Vibrate: with notifications.
• Internet and network state: used by Google services inside the app, and to upload the online copy if you turn it on (section 5). Without signing in, the app does not send your shop's data over the internet.
• Billing: to buy a Mojo Pro subscription through Google Play.

3. Third-party services

• Google Play (subscriptions): payment and subscription are between you and Google. We do not receive your card details. The app asks Google Play on your device whether your subscription is active.
• Google ML Kit (barcode scanning through Google Play services): scanning happens on your device. Google may collect diagnostics and performance data (device and app information and a per-installation identifier that does not identify you) under its policy: developers.google.com/ml-kit/android-data-disclosure. We do not receive this data.
• Sign in with Google (optional): if you tap "Sign in with Google", Google gives us your email, name and account identifier so we can identify you. We never see your Google password.

4. Sharing

When you tap "share" (a receipt, an offer picture, an order or collection message, an Excel file) the content goes to the app you choose (WhatsApp, for example) and is subject to that app's policy. We do not share your data with anyone.

5. Optional online copy (MOJO account)

An optional feature for Pro subscribers, off by default. If you sign in with Google from the "MOJO online" screen:

• What is uploaded: your Google email and name, and your shop data: items, prices, costs and stock; sales and purchase invoices; customer and supplier names, phone numbers and debts; cashier names; shop details. Never uploaded: PINs, printer settings and the local subscription state.
• Why: a safe copy if the phone is lost, and a web dashboard (supermarket.mojostudios.tech) where you see your shop's reports after signing in with Google. Nothing else: we do not use it for ads, sell it or share it.
• How: the original stays on your phone. The app uploads changes when there is internet and keeps working offline, uploading later. Transfer is encrypted (HTTPS); data is stored on a hosting server (Hostinger) in a private database, separated per shop: no shop can see another shop's data.
• Retention: kept while your account exists. When you delete the account your data is erased from the server immediately; it may remain in an internal daily backup for up to 7 days before being overwritten.
• Deletion: in the app (MOJO online → Delete my account and online data) or on the web: supermarket.mojostudios.tech/delete (sign in with the same Google account). Data on your phone is not affected. Or email info@mojostudios.tech.
• You can disconnect the account from the phone at any time on the same screen (it stops uploading).

When you turn it on, you are the one sending us your customers' data (names, phone numbers), and you are responsible for informing them if your local law requires it. We protect the data and delete it when you ask.

5b. Backup on the phone

Without the online MOJO account there is no cloud backup from us. If Android backup is on for your phone, Android may back up the app's data to your Google account according to your device settings (you control that in the phone settings; we cannot see it). If the phone is lost or wiped without a backup, the shop's data is lost. Export your items from the app regularly.

6. Deleting data

You can delete any item, customer or entry in the app, clear the app's storage in the phone settings, or uninstall the app; all of its data is then removed from your device. If you turned on the online copy: delete your account and data from the app or from the web deletion page (section 5) and it is erased from our server. Note that uninstalling the app alone does not delete the online copy: delete the account first.

7. Children

The app is a business tool and is not directed at children.

8. Security

Data is kept in the app's private space on your device. A cashier PIN separates users inside the app; it is not bank-grade protection, so use a screen lock on the phone. On the server: encrypted connections, separation between shops, session keys stored hashed, and request limits. No system is 100% secure; if a breach happens we will tell you.

9. Changes

If we change this policy we will update this page and its date, and tell you in the app before any new data leaves your device.

10. Contact

info@mojostudios.tech