Privacy Policy

Last updated:

This policy explains how Makhzony, operated by Appsfield LLC, handles your data. It describes what the application actually does today.

1. What we collect

a. Account data

When you sign in with Google we receive from Google your email address, display name, profile picture and user id. We never receive your password.

b. Your business data

What you enter in the app: products, stock, sales, purchases, suppliers, expenses, debts, wallets, delivery orders and notes. This data is yours.

c. Files you upload

Order-card and invoice PDFs are read inside your browser to extract text. These files are not uploaded to our servers.

Images you attach (product photos, debt payment receipts) are resized on your device and stored with your account data.

d. Technical data

Our infrastructure providers (section 4) may log ordinary technical data such as IP address and browser type for security and operation.

2. Local storage on your device

Makhzony uses your browser's localStorage for: your shop data so the app works offline, language, currency, dark mode, licence and trial state, and interface preferences.

These are not advertising trackers. Clearing site data in your browser removes them.

3. Why we use this data

• To run the app and show your data and reports.
• To sync your data across your devices when signed in.
• To verify licence or trial validity.
• To answer support requests.

We do not sell, rent, or advertise against your data.

4. Third parties actually used

Provider	Purpose
Google Firebase (Authentication + Firestore)	Sign-in and cloud storage of your data
Google Fonts	Interface fonts (Cairo, Tajawal)
cdnjs (Cloudflare)	pdf.js and Chart.js libraries for PDF reading and charts
Payment provider	Processing purchases — see section 5

We currently use no analytics or advertising tracking of any kind (no Google Analytics, no ad pixels, no heatmaps).

5. Payment data

When we activate a payment processor, it will be named explicitly on this page before any payment is taken.

In every case: Makhzony never receives or stores your full card number or CVC. Card details are handled by the payment processor itself.

Once payments are active, what we may keep is: subscription status, renewal date, and the processor's transaction identifier — used solely to determine your access.

6. Security

• The application is served over HTTPS.
• Access to your cloud data is governed by Firestore security rules: each account can read and write only its own documents.
• We do not share your data with advertisers or data brokers.

That said, no internet service can promise absolute security and we do not claim to. You are responsible for protecting access to your Google account.

7. Retention

• Your business data is kept while your account exists.
• It is not deleted automatically when a subscription ends.
• On a deletion request your cloud data is removed. It may persist in the infrastructure provider's backups for a limited period before being overwritten.

8. Your rights

• Access: your data is visible to you inside the app.
• Export: take a backup from settings.
• Correction: you can edit any record yourself.
• Deletion: request account deletion at support@makhzony.app.
• Objection: you can stop using the Service at any time.

9. Children

Makhzony is a business tool, not directed at people under 16, and we do not knowingly collect their data.

10. Changes to this policy

We may update this policy. The updated version is published here with its date.

11. Contact

Privacy questions or data deletion requests: support@makhzony.app