Legal Document

Privacy Policy

Effective Date: April 18, 2026  ·  Owner & Data Controller: Patrido Multimedia  ·  Lagos, Nigeria

Overview

This Privacy Policy describes how Patrido Multimedia ("we," "us," or "our") collects, uses, and protects your information when you use the Pocket Shop Manager mobile application.

We are committed to ensuring your business data remains private and secure, in alignment with global best practices and the Nigeria Data Protection Regulation (NDPR).

🔒 Our Core Commitment Pocket Shop Manager is built on an offline-first philosophy. Your business data stays on your device — we do not host or view your records on our servers.

1 Data Ownership (Offline-First Philosophy)

We believe your business data belongs exclusively to you. Pocket Shop Manager is designed as an offline-first application.

All inventory records, sales transactions, debt lists, and staff records are stored locally on your mobile device. Patrido Multimedia does not host, view, or process your primary business ledgers on our servers.

Multi-Business Support

Pocket Shop Manager supports the management of multiple business entities under a single local database. Each business profile — including its inventory, sales history, staff, and tax records — is stored as a separate entity on your device. If you operate more than one shop or business, you are responsible for maintaining the accuracy and integrity of each individual business record within the app.

🏢 Managing Multiple Shops All business entities under your account share the same Google Drive backup destination. Patrido Multimedia does not separately store or distinguish between your individual business profiles on our servers — all data resides locally on your device.

2 Information We Collect

A. User Account Information

When you choose to use cloud backup or Pro features, we collect your email address via Google OAuth solely to identify your backup identity. No other personal data is collected for this purpose.

B. Personal Recovery Email

The app offers an optional secondary Recovery Email that is used exclusively for Master Code recovery — the process by which a business owner can regain access to their account if they forget their 4-digit Master Code.

  • This email address is entered voluntarily by the business owner during setup or in Settings.
  • It is stored locally on your device and is not visible to or accessible by any staff members under your account.
  • It is transmitted to Patrido Multimedia servers only at the moment you initiate a Master Code recovery request, solely for identity verification purposes.
  • It is not used for marketing, sharing with third parties, or any purpose beyond account recovery.
🔒 Staff Cannot See Your Recovery Email The Recovery Email is a business-owner-only credential. Staff members logged in with their individual PINs have no access to this information under any circumstances.

C. Device Permissions

  • Camera: Used to scan barcodes and capture images of products and receipts.
  • Storage / Media: Required to save PDF business reports and manage local database files on your device.
  • Network: Used only for voluntary cloud sync, app updates, and license verification. The app functions fully without network access.

3 Customer Data for Invoicing

Voluntary Collection

The app allows you, as the shop owner, to optionally record customer names and phone numbers for the purpose of issuing digital invoices via WhatsApp. Providing this information is entirely voluntary — customers are never required to share their contact details.

💬 Suggested Approach You may tell your buyer: "If you add your phone number to this purchase, we can send you the invoice via WhatsApp — useful for your own tax records." The choice is always theirs.

Storage

All customer contact data collected through the app is stored locally on your device. Patrido Multimedia does not have access to your customers' names or phone numbers at any time.

Usage

Customer phone numbers are used strictly for invoice delivery via WhatsApp and internal debt tracking. You, as the business owner, are responsible for ensuring your customers are comfortable with providing this information and for using it appropriately.

4 External Hardware (Printers)

Bluetooth & Network Access

The app requires permission to access Bluetooth and your Local Area Network (LAN) specifically to discover and communicate with thermal or wireless printers connected to your device or shop network.

⚠️ Scope of Access No customer data, business records, or personal information is transmitted during the printer discovery or printing process. Bluetooth and network access is used exclusively for print jobs.

Pocket Shop Manager supports standard ESC/POS Bluetooth thermal printers and Wi-Fi network printers. The app does not store your network credentials or transmit any data outside your local network during printing.

5 Google OAuth & Drive Integration

If you enable Google Drive Backup, the app requests permission to access only the specific files and folders it creates within your Drive.

  • We cannot see your personal photos, documents, or any other files in your Google Drive.
  • Data synced to your Drive is transferred via secure HTTPS encryption.
  • Your encrypted backup exists in your personal Google Drive — not on Patrido Multimedia servers.
🔐 Google OAuth Declaration Pocket Shop Manager uses Google OAuth to backup your encrypted database to your own private Google Drive. We never store, access, or see your data on our servers. Your business data is yours, forever.

6 Staff Personnel Data

What We Store

Pocket Shop Manager allows business owners to create staff accounts containing the following information: staff name, assigned role or position, optional profile photo, and a unique login PIN. This data is used solely to enable staff access control within the app and to attribute sales transactions to individual employees for accountability purposes.

Storage

All staff personnel data is stored locally on your device and, if cloud backup is enabled, encrypted within your private Google Drive. Patrido Multimedia does not access, process, or store staff information on our servers.

Business Owner Responsibility

As the business owner and the data controller for your staff's information, you are responsible for obtaining appropriate consent from each staff member before entering their personal details into the app. This includes informing them that their name, role, and photo (if added) will be stored on the device used to manage your business and may be included in backup files stored in your personal Google Drive.

⚠️ Employer Obligation Under NDPR Under the Nigeria Data Protection Regulation (NDPR), collecting and storing personal information about individuals — including employees — without their knowledge or consent may constitute a violation of their privacy rights. Please ensure your staff are aware that their information is held within the app.

7 Personal Recovery Email

The Recovery Email is a private, owner-only security credential that enables Master Code recovery in the event that a business owner loses access to their account.

  • It is visible only to the account owner — not to staff, and not to Patrido Multimedia during normal operation.
  • It is accessed by Patrido Multimedia only upon a formal, user-initiated recovery request submitted via our support channel.
  • We recommend using a personal email address that only you control, rather than a shared business inbox.
  • You are responsible for keeping this address current. An outdated Recovery Email may result in permanent loss of access to your account if your Master Code is forgotten.
💡 Keep It Updated If you change your personal email address, update your Recovery Email immediately via Settings → Security → Recovery Email to avoid being locked out of your account.

8 Data Retention and Deletion

Because your data is stored locally on your device, deleting the application will delete all local business records unless you have performed a cloud backup to your Google Drive.

⚠️ Important — Back Up Before Uninstalling We strongly recommend performing a Google Drive sync before uninstalling or factory resetting your device to avoid data loss.

If you choose to delete your account, we will remove any stored identifiers (email address / UID) from our authentication server within 30 days of your request.

9 Security Measures

We use industry-standard encryption for data in transit to protect your information during cloud sync operations.

However, you are responsible for the physical and digital security of your device. We provide a secondary 4-digit master code feature for shop protection — please ensure this code remains confidential and is not shared with unauthorized individuals.

10 Your Rights (NDPR)

Under the Nigeria Data Protection Regulation (NDPR), Nigerian users have the following rights regarding their personal data:

  • The right to access your data
  • The right to object to processing of your data
  • The right to request correction of inaccurate data
  • The right to deletion of your account identifiers

As your business data is stored locally on your device, you can fulfill most of these rights yourself by manually editing or exporting your records directly within the app.

To exercise your rights regarding any data held on our authentication servers, please contact us using the details below.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your data rights, please reach out to our support team:

Patrido Multimedia 📧 support@pocketshopmanager.com.ng 📍 Lagos, Nigeria