Privacy Policy

Last updated: 9 September 2026

EmberPOS ("the app", "we", "us") is a point-of-sale and back-office app for cafés and restaurants, operated by Ember POS ("the operator"). This policy explains what information the app handles, why, and the choices you have. By creating an account or using the app you agree to this policy.

1. Who the data belongs to, and who is responsible for it

EmberPOS is business software. Most information in the app is your shop's own operating data (your menu, your sales, your staff records) that you enter and control. We store and process it on your behalf so the app can work across your devices. We do not sell your data and we do not use it for advertising.

That split matters in law, so we state it plainly. For the personal information your shop puts into the app — your employees' names and wages, the customers you add, the people on your utang list — your shop is the personal information controller: you decide what is collected and why, and you are the one those people deal with. We are the personal information processor: we hold and process it only to run the service for you, on your instructions, and we do nothing else with it. For your own account with us — the email you sign in with, your subscription status, error reports from the app — we are the controller.

In practice: if one of your staff or customers asks to see, correct or delete what your shop holds about them, that request is yours to answer, and the app gives you the tools to do it. If you need our help to answer it, ask us and we will help.

2. Information we collect

Category	Examples	Why
Account & sign-in	Your email address and a securely hashed password, or — if you choose "Continue with Google" — your Google account email and name. We never see your Google password.	To create and secure your shop account and sign you in.
Shop / business data	Shop name, menu and prices, ingredients and recipes, inventory, customers you add, orders and payments, expenses, quotations, and reports.	Core POS and reporting features you use the app for.
Staff records	Employee names, roles, staff passcodes (stored as bcrypt hashes), wages, time-clock entries and schedules that an owner/manager enters.	Staff login, timekeeping, and payroll features.
Technical / diagnostic	If the app hits an error, we record the error message and stack trace, the app version, the platform, the screen it happened on, and the account and shop it happened in.	To keep the app reliable and fix problems.
Subscription & purchase	If you subscribe, our billing provider receives your account identifier and the purchase and renewal status Google Play reports for it.	To unlock the paid features on every device you sign in to.

We do not collect your device location, contacts, photos, microphone, or advertising identifiers. EmberPOS contains no third-party advertising or analytics SDKs.

3. How payments work

Sales you record in the POS (cash, card, e-wallet, etc.) are your own bookkeeping entries — the app records the amount and method; it does not process or transmit your customers' card numbers. The EmberPOS subscription itself is purchased through Google Play Billing under Google's own terms — your card details go to Google, never to us. We only receive confirmation that a subscription is active.

4. Where data is stored and who processes it

Your data is stored in a secure cloud database hosted by Supabase (running on Amazon Web Services infrastructure). Each shop's data is isolated from every other shop by per-row security rules and is reachable only with your authenticated session. We use Google Sign-In (by Google LLC) only if you choose it. Subscription purchases are processed by Google Play Billing and their status is managed for us by RevenueCat, Inc., which receives your account identifier and your purchase and renewal status — but no card details and none of your shop's sales, staff or customer data. These providers process data solely to deliver the service to you.

5. How long we keep it

We keep your shop's data for as long as your account is active so the app remains useful. When you delete your account (see section 7), your shop data and account are permanently removed. Routine backups are rotated out within a short period.

6. Your rights

EmberPOS is operated from the Philippines and follows the Data Privacy Act of 2012 (Republic Act No. 10173) and the rules of the National Privacy Commission. Under that law you have the following rights over personal information we hold about you. Most of them you can exercise yourself, in the app, without asking anyone:

To be informed — to know that your data is being collected and what it is used for. That is what this document is.
To access — to see what we hold. Your shop data is visible to you in the app at any time; for anything else, ask us.
To correct it — to have anything inaccurate fixed. You can edit your shop data directly in the app.
To object — to say no to processing you did not agree to. We do not use your data for advertising, profiling or automated decisions of any kind.
To erasure or blocking — to have your data removed. You can delete your entire shop and account from inside the app (section 7).
To data portability — to take your data with you in a usable form. You can export your menu, sales and reports from Settings → Data as CSV files.
To damages — to be compensated if you suffer harm because your data was handled wrongly.
To complain — if you are not satisfied with how we have answered you, you can lodge a complaint with the National Privacy Commission at privacy.gov.ph. You do not need our permission to do so.

Write to the address in section 12 to exercise any of these. We answer within 15 working days, and we will tell you if we need longer and why.

7. Deleting your account and data

In the app: Open Settings → Data → Danger zone → "Delete shop & account", type DELETE to confirm, and tap Permanently delete.

This immediately and permanently erases your shop and all of its data — sales, menu, inventory, customers, staff records, reports — and closes your EmberPOS account. This cannot be undone. You can also request deletion by emailing us at atlasco.web@gmail.com and we will action it.

8. Children

EmberPOS is a tool for businesses and is not directed to children under 13.

9. Security

Account and staff passwords are stored only as salted bcrypt hashes — never in plain text — and password hashes cannot be read back through the app's API. Connections are encrypted in transit (HTTPS/TLS), and access to your data requires your authenticated session. Each shop's records are separated at the database level, so one shop's session can never read or change another shop's data.

10. If data is exposed

If personal information we hold is lost, exposed or accessed by someone who should not have it, and that is likely to put anyone at real risk, we will notify the National Privacy Commission and the people affected within 72 hours of becoming aware of it, as the Data Privacy Act requires. The notice will say what happened, what information was involved, what we are doing about it, and what you should do. We will not wait until we have every detail before telling you.

11. Changes to this policy

If we make material changes we will update the "Last updated" date above and, where appropriate, notify you in the app.

12. Contact and our Data Protection Officer

We have designated a Data Protection Officer as required by the Data Privacy Act. Any question about this policy, any request to exercise a right in section 6, and any privacy concern should go to them:

Data Protection Officer
Ember POS Computer Software Store
Philippines
Email: atlasco.web@gmail.com

Registered with the Department of Trade and Industry (Business Name No. 8408424) and with the Bureau of Internal Revenue under RDO 041, Mandaluyong.