Klic Business – Privacy Policy

1. Information We Collect

a) Account Information

When you create an account we collect:

• Username — a unique identifier you choose. We do not require or collect your email address.
• Password — stored only in hashed form using industry-standard algorithms. We never have access to your plain-text password.

b) Business Data You Enter

The App stores business records you choose to create, including products, inventory, pricing, discounts, purchase history, invoices and related documents, branch details, and customer or contact information you enter. You are responsible for ensuring you have the right to enter any third-party personal data (e.g., your customers' details) into the App (see Section 8).

c) Camera and Photo Library

With your permission, the App accesses your device camera and photo library solely to:

• Scan barcodes/QR codes — frames are processed on-device and are not transmitted to our servers;
• Capture or select photos (e.g., product images) — only photos you explicitly choose to upload are stored in your account.

d) Location

With your permission, the App accesses your device location only while you actively pin a branch on the map. The selected coordinates are saved as your branch location. We do not track your location in the background.

e) Technical Data

Standard technical information (such as IP address and request metadata) is processed by our hosting provider as part of operating the service. We do not use analytics SDKs, advertising SDKs, or crash-reporting SDKs in the App.

2. How We Use Your Information

We use your information to: provide and maintain the App's functionality; authenticate you and secure your account; store and sync your business data across sessions and devices; and respond to service-related inquiries. We do not sell your data, use it for advertising, or share it with advertisers.

3. Third-Party Service Providers

We share data only with the processors necessary to run the App:

• Supabase — backend hosting, database, and authentication. Your account and business data are stored on Supabase infrastructure.
• OpenStreetMap — when you view the in-app map, map tiles are loaded from OpenStreetMap servers, which receive your IP address as part of the request (see the OSMF privacy policy).
• Google Fonts — the App may load fonts from Google servers, which receive your IP address as part of the request.

Beyond these, we disclose information only if required by a valid legal request from a competent authority, or to protect our legal rights.

4. Data Security

All data in transit between the App and our servers is encrypted (HTTPS/TLS). Passwords are hashed; access to your account requires your credentials. No method of transmission or storage is 100% secure, but we apply reasonable technical and organizational measures consistent with the Israeli Privacy Protection Law, 5741-1981, and its regulations (including the Data Security Regulations).

5. Data Retention and Account Deletion

We retain your account and business data for as long as your account is active. You may delete your account at any time from within the App (Settings → Delete Account) or by emailing klic.pay@gmail.com from a verifiable channel with your username. Upon deletion, your account and associated business data are permanently removed from our production systems within 30 days, except where retention is required by law. Residual copies in encrypted backups are purged on the backup rotation cycle.

6. Your Rights

Subject to applicable law — including the Israeli Privacy Protection Law and, where applicable, the EU/UK GDPR — you may request: access to the personal data we hold about you; correction of inaccurate data; deletion of your data; and a copy of your data in a portable format. To exercise these rights, contact klic.pay@gmail.com. We will respond within the timeframes required by applicable law. If you are in the EEA/UK, you also have the right to lodge a complaint with your supervisory authority; in Israel, with the Privacy Protection Authority.

7. Children

The App is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.

8. Your Customers' Data (You as Controller)

Where you enter personal data about your own customers or contacts, you are the controller/owner of that data and responsible for complying with applicable privacy law (including obtaining any required consents). We process such data only on your behalf, as a processor, to provide the App.

9. International Transfers

Our service providers may store or process data outside Israel. Where data is transferred internationally, we rely on our providers' compliance frameworks and safeguards recognized under applicable law.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated via the App or this website, and the "Last updated" date will be revised. Continued use of the App after changes take effect constitutes acceptance.

11. Contact

Questions or requests: klic.pay@gmail.com · https://getklic.co/