This Privacy Policy describes how OSPOS ("we," "us," "our") collects, uses, and protects your information when you use the OSPOS mobile application and related services (the "Service"). We are committed to protecting your privacy and being transparent about our data practices.
OSPOS is built on a simple idea: your data is yours. We designed the app so that the Free Tier works entirely on your device with zero data leaving your phone. For Paid Tier users, we collect only what's necessary to provide cloud features. We never sell your data.
If you use the Free Tier, we collect nothing. All data — including your menu, orders, transaction history, and business settings — is stored locally on your device using SQLite. No data is transmitted to our servers. No account is required. No internet connection is needed.
When you create an OSPOS account and use the Paid Tier, we collect:
| Data | Purpose | Storage |
|---|---|---|
| Email address | Account authentication, notifications | Our servers |
| Business name | Receipts, account identification | Our servers |
| Business settings | Tax rate, tip config, sync preferences | Our servers + device |
| Order history | Cloud sync, reporting | Our servers + device |
| Transaction records | Cloud sync, reporting, receipts | Our servers + device |
| Customer phone/email | Receipt delivery (entered per-transaction) | Our servers (with order) |
If you sign in with Apple, we receive only the information Apple provides based on your choices: your name (if you share it) and either your real email address or an Apple-generated private relay address. We use this solely for account creation and authentication.
We never collect, store, process, or have access to:
All payment card data is handled exclusively by Stripe in accordance with PCI DSS standards.
We use your information solely to:
We do not use your data for advertising, profiling, or marketing to third parties.
The Paid Tier integrates with the following third-party services, each with their own privacy policies:
We do not share your data with any other third parties.
We take reasonable measures to protect your data:
You have the right to:
If you are located in the European Union, United Kingdom, or California, you may have additional rights under GDPR, UK GDPR, or CCPA respectively. Contact us to exercise these rights.
OSPOS is a business tool intended for users 18 years of age or older. We do not knowingly collect information from children under 13 (or under 16 in the EU). If you believe we have inadvertently collected such data, please contact us and we will promptly delete it.
Our servers are located in the United States and Germany (Hetzner). If you use the Paid Tier from outside these regions, your data will be transferred to and processed in these locations. By using the Paid Tier, you consent to this transfer. We ensure appropriate safeguards are in place for international transfers.
We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' notice via email (for Paid Tier users) or in-app notification. The most current version will always be available at ospos.app/privacy.
If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:
OSPOS
Email: hello@ospos.app
Website: ospos.app