Privacy Policy

OmniTill is developed by NexlyTech ("we", "us"). This policy explains what data the app handles, where it goes, and the choices you have. It applies to the OmniTill mobile application published on Google Play under application ID dev.nexlytech.omnitill and to the website at omnitill.nexlytech.dev.

• You sign in with an email and password or with Google to create your business account.
• Selling, stock, printing, and reports work offline on your device.
• When you are online, your store records sync to our cloud database so they are backed up and available on your other devices. Only members of your business can read them.
• OmniTill has no advertising, analytics, or crash-reporting SDKs. We do not sell personal data.
• Optional smart features (reading a supplier invoice from a photo, understanding a spoken item list, matching an import file) send only the content you give them to an AI service for processing.

To set up OmniTill you create an account with your email address and a password, or sign in with Google. Accounts are managed by Supabase, our authentication and database provider. We receive your email address and, for Google sign-in, the basic profile Google shares (such as your name and email). Passwords are stored only as secure hashes. We use your account to identify you, link your devices to your business, and keep your data private to your business.

OmniTill stores the records you create in a database on your device and syncs them to your business's cloud account:

• Business and store details, settings, devices, and staff membership
• Products, categories, barcodes, prices, taxes, batches, expiry dates, and product photos
• Sales, receipts, payments, returns, quotations, promotions, and loyalty points
• Stock movements, purchases, suppliers, transfers between branches, and stock counts
• Shifts, cash movements, expenses, and ledger entries
• Customer details you choose to record, such as name, phone number, notes, delivery address, and for installment plans the buyer's and guarantor's names, phone numbers, and ID-card numbers

Cloud data is protected by row-level security, so only signed-in members of your business can read or change it. Data is encrypted in transit. We access it only when needed to operate, secure, or support the service, or when the law requires it.

Photos you add to products are saved on your device and uploaded through our server to Cloudflare R2 storage so they appear on your other devices. Each photo is stored under a random, unguessable address. Receipt and bill photos you attach to ledger entries stay on your device.

Some optional features use an AI model to read content. They run only when you use them:

• Invoice scanning — the invoice photos you take or choose, with your store currency, are sent to read the supplier, items, quantities, and prices.
• Voice item lists — the text of what you said and a list of likely product names are sent to match items.
• Import mapping — the column names and sample rows of a file you import are sent to match its columns to OmniTill's fields.

These requests go through our server to OpenRouter, which passes them to an AI model provider (for example Google Gemini) under their terms. We log each request's business, user, feature, and size to enforce fair daily limits, but we do not keep the photos or text after the answer is returned. We do not use your content to train AI models.

When you tap the microphone, speech is converted to text by your phone's speech-recognition service (Google on Android, Apple on iOS), which may process audio on its servers under its own policy. OmniTill does not record or store audio.

To speed up setup, OmniTill can download ready-made product catalogs, such as a medicine list for your country. Downloading a catalog sends only a normal web request; no store data is sent.

Receipts and labels are sent directly from your device to your printer over Bluetooth, Wi-Fi/LAN, USB, or a built-in printer. Barcode scanners work locally. None of this passes through our servers.

OmniTill can keep daily backup files and export reports or data on your device. A backup or export leaves your device only when you choose to share or save it through your phone's share sheet, and the app you pick then applies its own policy.

OmniTill asks for each permission only when you use the feature that needs it:

• Camera — scanning barcodes and taking product, bill, logo, and invoice photos.
• Photos — choosing an existing picture, through the system photo picker.
• Microphone and speech recognition — adding items by voice.
• Bluetooth / nearby devices — finding and connecting to receipt and label printers. On Android 11 and older, the system calls this location access; OmniTill never reads, stores, or shares your location.
• Notifications — optional daily reminders about low stock, expiring items, due installments, and unpaid credit. Reminders are created on your device.
• Biometrics — optionally unlocking the till with your fingerprint or face. Biometric data never leaves your device's secure hardware.

OmniTill contains no advertising SDK, analytics SDK, remote crash reporter, or behavioral tracker. We do not sell personal data, share it for advertising, or build advertising profiles.

We share data only with providers that help us run OmniTill, and only for that purpose:

• Supabase — accounts, the cloud database, and server functions.
• Cloudflare — storage for product photos and catalogs.
• OpenRouter and its AI model providers — the optional smart features described above.
• Google — Google sign-in, if you choose it, and Google Play for installing the app.

OmniTill is a tool for recording details about the people your shop serves. Your business decides what customer information to enter and is responsible for collecting and using it lawfully, including any consent your local law requires. We process that information only on your behalf to provide the app.

Your store data is kept while your business account is active. Records you delete in the app are marked as deleted and synced so they disappear from your other devices. Completed sales and payments are kept as permanent records, as accounting requires, until the business is deleted.

To delete your account and all of your business's cloud data, email hello@nexlytech.dev from the email address on your account with the subject "Delete my OmniTill account". We will confirm and delete the account, the business, its stores, records, and product photos within 30 days, except where the law requires us to keep something longer. Uninstalling the app removes the data on that device; it does not delete your cloud account.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to or restrict its processing. You can view and change most data directly in OmniTill and export it from the app. For anything else, contact us at the address below. You may also complain to your local data-protection authority.

OmniTill is a business tool and is not directed to children under 13. We do not knowingly collect personal data from children.

Our providers may store and process data in countries other than yours. We rely on their contractual and security safeguards to protect data wherever it is processed.

If this policy changes, we will update this page and the date above. Material changes to how data is handled will be communicated in the app before they take effect.

Questions about privacy in OmniTill? Email hello@nexlytech.dev.