Skip to content

ChouyLok Privacy Policy

Last updated: 22 October 2026

This policy covers the ChouyLok shop-management and point-of-sale app and its related services. For privacy questions, contact chouylok@gmail.com.

Information we process

  • Account information: your name, phone number, optional email, profile image, sign-in credentials, shop membership and permissions. If you link Telegram, we process the Telegram identifiers needed for that feature.
  • Shop information you provide: shop and branch details, products, stock, staff, customers and suppliers, contact/delivery information, orders, receipts, payment references and billing records. Some records contain personal information about your customers or staff.
  • Images and files you choose: profile/product images, payment QR images and imported files needed for the feature you use. Uploaded images may be available through shareable image URLs or a shop's public storefront.
  • Technical information: authentication and device-pairing information, app/device details and diagnostic or usage information produced by the app and its integrated SDKs.

How the information is used

We use this information to provide accounts, shop operations, stock and sales synchronization, receipts, payments, reports, account security and support. Offline POS data is also stored on the device so the shop can continue working without a connection. Only provide information you are authorized to use.

Camera access supports barcode/QR scanning. Bluetooth access supports compatible printers. File selection lets you choose an image or import file. You can manage device permissions in Android settings; affected features may then be unavailable.

Service providers and sharing

Shop information is accessible to authorized people in that shop and through the sharing, storefront, export and printing features they use. Cloud hosting and storage providers process information needed to operate the service. If dedicated database hosting is arranged, the shop's business records use a separate database. Sign-in identities, permissions and billing remain in the shared platform; existing image storage can also remain shared. A dedicated business database does not mean that every account-related record or server resource is separate. See Dedicated database hosting. Telegram processes information when you use linked-account or shop messaging features. Payment providers process the information needed for a payment.

The Android scanners integrate Google ML Kit and Google scanning components. Google describes ML Kit input-image processing as on-device, and separately collects device/app information, per-installation identifiers, API usage and performance/error metrics. See ML Kit privacy and Google's SDK data disclosures.

Security

We use authenticated access and shop permissions to restrict account and shop data. The production API and cloud service connections use HTTPS. Local printer connections depend on the printer and network; use networks and devices you trust. Keep passwords and signed-in devices secure. Contact support if you believe someone has unauthorized access.

Retention and deletion

We keep active account and shop information while it is needed to provide the service. You can delete your account.

  • Shop owner: confirming account deletion permanently removes the owner account, the shop, its staff accounts and its live shop records. Shop access and paired-device access are revoked. Image cleanup runs automatically and is retried if a storage provider is temporarily unavailable.
  • Staff member: deletion removes your sign-in access and identifying profile information. The shop and its sales/business records remain, with a non-identifying deleted-account reference where needed for record integrity.
  • Backups: residual copies may remain in restricted backups for up to two years under the existing backup rotation. Minimal deletion records (record identifiers and deletion time) support reapplying deletions after a restore and are retained for the backup-retention period.

Data already on another offline device, exported files and printed receipts must also be removed by the person or shop holding those copies. Uninstalling the app does not delete the server account. Contact support for questions about your data, corrections or deletion when you cannot sign in.

Changes and contact

We update this page when our practices change. The date above identifies this version. Privacy and deletion contact: chouylok@gmail.com.