Ember POS
by Atlasco
Privacy Policy
Last updated: 28 July 2026
EmberPOS ("the app", "we", "us") is a point-of-sale and back-office app for cafés and restaurants, operated by EmberPOS by Atlasco ("the operator"). This policy explains what information the app handles, why, and the choices you have. By creating an account or using the app you agree to this policy.
1. Who the data belongs to
EmberPOS is business software. Most information in the app is your shop's own operating data (your menu, your sales, your staff records) that you enter and control. We store and process it on your behalf so the app can work across your devices. We do not sell your data and we do not use it for advertising.
2. Information we collect
| Category | Examples | Why |
|---|---|---|
| Account & sign-in | Your email address and a securely hashed password, or — if you choose "Continue with Google" — your Google account email and name. We never see your Google password. | To create and secure your shop account and sign you in. |
| Shop / business data | Shop name, menu and prices, ingredients and recipes, inventory, customers you add, orders and payments, expenses, quotations, and reports. | Core POS and reporting features you use the app for. |
| Staff records | Employee names, roles, staff passcodes (stored as bcrypt hashes), wages, time-clock entries and schedules that an owner/manager enters. | Staff login, timekeeping, and payroll features. |
| Technical / diagnostic | If the app hits an error, we record the error message and stack trace, the app version, the platform, the screen it happened on, and the account and shop it happened in. | To keep the app reliable and fix problems. |
| Subscription & purchase | If you subscribe, our billing provider receives your account identifier and the purchase and renewal status Google Play reports for it. | To unlock the paid features on every device you sign in to. |
We do not collect your device location, contacts, photos, microphone, or advertising identifiers. EmberPOS contains no third-party advertising or analytics SDKs.
3. How payments work
Sales you record in the POS (cash, card, e-wallet, etc.) are your own bookkeeping entries — the app records the amount and method; it does not process or transmit your customers' card numbers. The EmberPOS subscription itself is purchased through Google Play Billing under Google's own terms — your card details go to Google, never to us. We only receive confirmation that a subscription is active.
4. Where data is stored and who processes it
Your data is stored in a secure cloud database hosted by Supabase (running on Amazon Web Services infrastructure). Each shop's data is isolated from every other shop by per-row security rules and is reachable only with your authenticated session. We use Google Sign-In (by Google LLC) only if you choose it. Subscription purchases are processed by Google Play Billing and their status is managed for us by RevenueCat, Inc., which receives your account identifier and your purchase and renewal status — but no card details and none of your shop's sales, staff or customer data. These providers process data solely to deliver the service to you.
5. How long we keep it
We keep your shop's data for as long as your account is active so the app remains useful. When you delete your account (see section 7), your shop data and account are permanently removed. Routine backups are rotated out within a short period.
6. Your choices and rights
- Access & correct: you can view and edit your shop data directly in the app at any time.
- Export: you can export your menu and sales data from Settings → Data.
- Delete: you can delete your entire shop and account from inside the app (section 7).
- Depending on where you live, you may also have rights to request a copy or deletion of your data by contacting us.
7. Deleting your account and data
In the app: Open Settings → Data → Danger zone → "Delete shop & account",
type DELETE to confirm, and tap Permanently delete.
This immediately and permanently erases your shop and all of its data — sales, menu, inventory, customers, staff records, reports — and closes your EmberPOS account. This cannot be undone. You can also request deletion by emailing us at atlasco.web@gmail.com and we will action it.
8. Children
EmberPOS is a tool for businesses and is not directed to children under 13.
9. Security
Account and staff passwords are stored only as salted bcrypt hashes — never in plain text — and password hashes cannot be read back through the app's API. Connections are encrypted in transit (HTTPS/TLS), and access to your data requires your authenticated session. Each shop's records are separated at the database level, so one shop's session can never read or change another shop's data.
10. Changes to this policy
If we make material changes we will update the "Last updated" date above and, where appropriate, notify you in the app.
11. Contact
EmberPOS by Atlasco
Philippines
Email: atlasco.web@gmail.com