Legal

Privacy Policy

This policy explains what personal data the SmartPOS Mobile app and this website process, why, and what rights you have. We wrote it in plain language.

Effective: 19 October 2026Applies to: SmartPOS Mobile (iOS & Android), SmartPOS Desktop, this website

1. Who we are

AS Apps is the software business of Arlind Sela, based in North Macedonia. We develop SmartPOS (desktop and mobile) and custom software for businesses.

Contact for anything related to privacy: arlind.sela1@gmail.com · +389 70 802 125.

2. Summary

SmartPOS Mobile connects only to your venue's own SmartPOS server. Your orders, sales and reports stay on that server and are never sent to AS Apps. The app has no advertising, no analytics and no tracking, and we do not sell or share personal data.

3. How SmartPOS works

SmartPOS is used by businesses (cafés, bars, restaurants, hotels). Each business runs the SmartPOS Desktop program and its server (ServerKafe) on its own computer. The mobile app is a tool for the business's staff and owners: it connects to that server over the venue's Wi-Fi, or over the internet using an address and access key provided by the business.

The app does not have public sign-up. Staff profiles, PIN codes and permissions are created by the business's administrator in SmartPOS.

4. Data the app processes

DataWhyWhere it goes
Staff PIN (entered at login)To sign in to the venue's systemSent to the venue's server to verify; not stored on the phone
Session: sign-in token plus your staff name, role and permissionsTo keep you signed in securely and show what your role allowsStored on the phone in the system's secure storage (iOS Keychain / Android Keystore) and on the venue's server
Device information: a random device ID created by the app, device name, platform (iOS / Android) and app versionSo the venue's administrator can see and manage which phones are allowed to connectVenue's server
Push notification tokenTo deliver alerts such as QR guest requests and "order ready"Venue's server; delivered through Google Firebase Cloud Messaging (and Apple Push Notification service on iPhone)
Venue settings: venue name, server address, access key, chosen language and themeTo remember your venues and preferencesOnly on the phone
Business data: tables, orders, items, prices, receipts, reports, staff names, clients and suppliers entered by the businessTo provide the point of sale functions you useExchanged between the app and the venue's server only; it is not stored by AS Apps

The app does not access your location, contacts, photos, microphone or camera.

5. What we never do

  • No advertising and no advertising identifiers.
  • No analytics or tracking SDKs, and no tracking across other companies' apps or websites.
  • No selling, renting or sharing of personal data with third parties for their own purposes.
  • No copy of the venue's business data on AS Apps servers.

6. Push notifications

If you allow notifications, the app receives a push token from Google Firebase Cloud Messaging (on iPhone, together with Apple Push Notification service) and sends it to the venue's server. The venue's server uses it to send you alerts. You can turn notifications off at any time in your phone's settings. Google's processing is described in the Firebase privacy information.

7. Who is responsible for your data

The business (venue) that uses SmartPOS decides which staff, clients and transactions are recorded and is the controller of that data. It runs the server where the data is stored. Questions about the data a venue holds about you, for example as an employee, should go first to that venue.

AS Apps provides the software and, when a venue asks for support or maintenance, may access the venue's system on its behalf as a processor, only for that purpose and under the venue's instructions.

Under the Law on Personal Data Protection of North Macedonia and the EU General Data Protection Regulation (GDPR), where they apply, data is processed:

  • to perform the contract between the venue and its staff or with AS Apps (providing the POS service);
  • for legitimate interests such as security (device management, blocking unknown devices);
  • to meet legal obligations of the venue, for example fiscal and accounting records;
  • on the basis of consent for push notifications, which you can withdraw at any time in your phone's settings.

9. Retention

  • On the phone: data stays until you sign out, remove the venue in the app, or uninstall the app.
  • On the venue's server: kept as long as the venue needs it. Sales, receipts and accounting records may need to be kept for the period required by tax law.
  • Emails to AS Apps: kept as long as needed to answer and support you.

10. Security

Each phone signs in with a PIN and receives its own session token, stored in the phone's secure storage. Access over the internet is protected by a venue access key, and repeated wrong attempts are blocked. Administrators control what each role can see and do. No system is perfectly secure, so we recommend that venues keep their server PC protected and up to date.

11. Your rights

You have the right to access, correct or delete your personal data, to restrict or object to processing, to data portability, and to withdraw consent. To delete the data stored by the app, follow the steps on Delete your data.

For data a venue holds about you, contact that venue. You can also contact us and we will help coordinate. We reply within 30 days. You may also complain to the Personal Data Protection Agency of North Macedonia (azlp.mk) or your local supervisory authority.

12. This website

This website does not use cookies, analytics or tracking. It remembers your light / dark theme choice in your browser's local storage. Fonts are loaded from Google Fonts, which receives your IP address to deliver them. The contact form does not send data to a server: it opens your own email app with the message ready, and we receive it only if you send it.

13. Children

SmartPOS is a business tool and is not directed at children under 16. We do not knowingly collect data from children.

14. Changes to this policy

We may update this policy when the app changes. The new version will be published on this page with a new effective date. For important changes, we will also inform venues directly.

15. Contact

AS Apps · Arlind Sela
North Macedonia
Email: arlind.sela1@gmail.com
Phone / WhatsApp / Viber: +389 70 802 125