This Privacy Policy explains how Karbar24 ("Karbar24", "we", "us") collects, uses, shares and protects information when you use:
- the website karbar24.com and the client portal at karbar24.com/app;
- the Karbar24 POS app, shown on your device as K24 POS (Android
com.zayaanit.karbar24.pos, Windows — including the Microsoft Store — macOS, Linux and web); - the Karbar24 Cloud terminal app, shown as K24 Cloud (
com.zayaanit.karbar24.pos.cloud); - the Karbar24 KDS kitchen display app, shown as K24 Kitchen (
com.zayaanit.karbar24.kds); - the Karbar24 Waiter app, shown as K24 Waiter (
com.zayaanit.karbar24.waiter); - the Karbar24 Cloud service for Cloud-edition customers.
Together these are the "Services". By using them you agree to this policy. If you do not agree, please do not use the Services.
Who we are
Karbar24 is the developer of the apps listed above and is responsible for the personal information described here. You can contact us at support@karbar24.com about anything in this policy.
Information we collect
We collect only what we need to run the Services.
Account information (you give it to us)
- Your name, email address, mobile number and password (stored only as a secure hash).
- Optional profile photo, language and time zone.
- Business details: organisation name, billing address, country, VAT / tax numbers.
- If you sign in with Google or Facebook, we receive your name, email address and account ID from that provider. We never receive your Google or Facebook password.
Purchase and payment information
- Plans, add-ons, invoices, coupons used and payment status.
- For bKash payments: the transaction ID (TrxID) and sender number you give us so we can confirm the payment.
- Card payments are processed by Stripe. We never see or store your full card number or CVC — we only keep the payment reference, card brand and last four digits.
Licence and device information (sent by the apps)
When you activate a licence key in a Karbar24 app, and then from time to time while the device is online (about once an hour, and shortly after you add or remove a business, branch, shop or terminal), the app sends our licence server (bo.karbar24.com):
- your licence key;
- a random device ID created by the app (not your phone's hardware ID or advertising ID), the device name you choose, the platform (Android, Windows, web, etc.) and the app version;
- for each business on the device: its name (legal name if you entered one) and a one-way code made from it, used to match the licence to the business;
- counts used for plan limits: businesses, branches, shops, terminals, devices and products, and how many sales were made today — numbers only, never the sales, customers or items themselves.
We send back a signed licence, and — so every device on the same licence key shows the account-wide usage — the names and branch / shop / terminal counts of the businesses on that key's other devices. Without a licence key, the Standalone POS sends us nothing.
We do not collect advertising IDs, contacts, call logs, SMS, precise or approximate location, or a list of other apps on your device.
Business data you enter in the POS (Standalone edition) Products, prices, stock, orders, sales, staff accounts and your own customers' details (such as name, phone number and delivery address) are stored on your device in a local database. They are not sent to us unless you use a Cloud feature or send us a backup or support file yourself.
Business data on Karbar24 Cloud (Cloud edition) If you use the Cloud edition, the business data above is synced to our Cloud servers so you can reach it from other devices and see reports online. We process this data only on your instructions, to provide the Service to you.
Support and communications Messages, attachments and contact details you send in support tickets or by email. Contact support in the POS opens our support page in your browser with the app version, edition, device type and business name filled in; nothing is sent until you submit the ticket.
Things the apps do only when you start them
- Kitchen displays and waiter phones you pair with the POS talk to it directly over your own Wi-Fi. Orders travel between your devices, not through us.
- Sharing a receipt or summary by WhatsApp, SMS, email or the share menu hands the text to the app you pick; that app's own privacy policy then applies.
- Pictures from the web: a picture link you paste for a product is loaded from that website. The sample restaurant and the dummy data load their example product pictures from Unsplash (
images.unsplash.com), which sees your device's IP address like any website. - Backups are files you save and keep wherever you choose. Newer versions of the Android apps keep their data out of the device's own Google backup and out of Android's phone-to-phone copy; older versions may include it, depending on your device's backup settings.
Website usage
- Necessary cookies keep you signed in, protect forms (CSRF) and remember your language.
- With your consent only, Google Analytics measures page visits (pages viewed, browser, approximate country). You can decline in the cookie banner; analytics stays off until you accept.
- Our servers keep standard logs (IP address, browser, time, page requested) for security and troubleshooting.
App permissions (Android)
The apps ask only for permissions they need. You can refuse or withdraw any of them in your device settings; only the related feature stops working.
- Camera — POS: scan product barcodes and take product or logo photos. KDS and Waiter: scan the QR code that pairs the app with your POS. Images stay on your device unless you add them to a Cloud-synced item.
- No access to your photos or files — to use an existing picture for a product, your logo or your profile photo, the POS opens Android's own photo picker, which gives the app only the one picture you choose. Newer versions of the apps do not ask for the Photos and media or storage permission; older versions of the POS may still list it.
- Nearby devices / Bluetooth — POS: connect to Bluetooth receipt printers and cash drawers. We do not use Bluetooth to find your location.
- Network and Wi-Fi state — find and connect the POS, KDS and Waiter apps to each other on your local network, and check internet access for licensing and sync.
- Notifications — POS and Waiter: show order alerts and keep you informed while the local hub runs in the background.
- Foreground service, wake lock, keep screen on — keep the POS local hub and the kitchen / waiter screens running during service.
- Vibrate — KDS and Waiter: alert staff to new or ready orders.
- Start on boot, display over other apps — KDS only: reopen the kitchen display automatically when a dedicated kitchen screen restarts.
- Internet — licensing, payments, Cloud sync and updates.
How we use information
- To create and manage your account and sign you in securely (including two-factor authentication).
- To sell, activate and renew licences, enforce plan limits and prevent licence misuse.
- To process payments, issue invoices and receipts, and handle refunds.
- To sync and back up business data for Cloud-edition customers.
- To send service emails (receipts, renewal reminders, security alerts, offers you can opt out of).
- To answer support requests.
- To keep the Services secure, detect fraud and abuse, and fix problems.
- To understand how the website is used (only with consent) and improve the Services.
- To meet legal, tax and accounting obligations.
We do not sell your personal information, and we do not use it for third-party advertising.
How we share information
We share information only with service providers that help us run the Services, under contracts that require them to protect it, or when the law requires it:
- Payment providers — Stripe (card payments) and bKash (mobile payments).
- Sign-in providers — Google and Facebook, only if you choose to sign in with them.
- Hosting and email providers — servers that host the website, API and Cloud service, and the service that delivers our emails.
- Google Analytics — website usage only, only if you accept analytics cookies.
- Authorities — when required by law, a court order, or to protect the rights, safety and property of our users or Karbar24.
- Business transfer — if Karbar24 is merged or sold, information may transfer to the new owner under this policy.
Data security
- All traffic between the apps, the website and our servers is encrypted in transit (HTTPS / TLS).
- Passwords are stored as one-way hashes; staff access to our systems requires two-factor authentication.
- Licences are verified with signed keys, and access to customer data is limited to staff who need it.
- No method of storage or transmission is 100% secure, but we work to protect your information and will tell you of a breach where the law requires.
Data stored on your own device is protected by your device security. Keep your device locked and your POS staff PINs private.
Data retention
- Account, licence and device data — kept while your account is open.
- Invoices and payment records — kept as long as tax and accounting law requires, even after account deletion.
- Cloud business data — kept while your Cloud subscription is active. A lapsed subscription never deletes data; it is removed when you delete your account or ask us to.
- Support tickets — kept while your account is open, then deleted with it.
- Server logs — kept for a limited period for security, then deleted.
- Business data on your device — stays on the device until you delete it in the app or uninstall the app.
Deleting your account and data
You can delete your Karbar24 account and its data at any time:
- Sign in at karbar24.com/app and open Profile.
- Choose Request account deletion and confirm. (Cancel any active paid subscription first.)
- Your account is closed immediately and permanently deleted after 30 days. Contact support within that time if you change your mind.
If you cannot sign in, email support@karbar24.com from your account email address with the subject "Delete my account". We will confirm the request and delete your account within 30 days.
What is deleted: your profile, sign-in details, team members, devices, licences, support tickets and any Cloud business data. What we keep: invoices and payment records required by law, kept in a minimal form.
To delete the data stored on a device, open My Profile → Privacy & your data → Delete account & data in the POS app (owner only; asks for your password and offers a backup first), or uninstall the app. You can also download a copy of your account data from Profile in the portal. Step-by-step: karbar24.com/legal/delete-account.
Your rights and choices
Depending on where you live, you may have the right to access, correct, download, or delete your personal information, to object to or limit some processing, and to withdraw consent at any time. You can do most of this in the portal Profile page; for anything else, email support@karbar24.com. You may also complain to your local data protection authority.
To stop offer emails, use the unsubscribe link where one is provided or email support@karbar24.com. Service emails such as receipts and security alerts cannot be switched off while your account is open.
Your customers' data
When you record your own customers' details in Karbar24 POS, you are responsible for that data and for telling your customers how you use it. On the Cloud edition we store and process it on your behalf only to provide the Service.
Children
The Services are business tools for adults and are not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.
International transfers
Our servers and service providers may be located outside your country. When information is transferred, we take steps to protect it as described in this policy.
Changes to this policy
We may update this policy from time to time. The version number and effective date at the top of this page show when it last changed. For important changes we will notify you by email or in the portal before they take effect.
Contact us
Questions, requests or complaints about privacy:
- Email: support@karbar24.com
- Website: karbar24.com/contact