Privacy Policy

Last updated: July 11, 2026

NEXTONE ("we", "us", or "our") operates the NEXTONE mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

1. Information We Collect

We may collect the following types of information:

• Account Information: Name, email address, and profile picture when you sign in via Google Sign-In.
• Business Data: Company name, branch information, products, customers, suppliers, invoices, and financial records that you create and manage within the App.
• Device Information: Device type, operating system version, and unique device identifiers for push notifications and security purposes.
• Usage Data: App interaction data used to improve functionality and performance.

2. How We Use Your Information

We use the collected information to:

• Provide, operate, and maintain the App's point-of-sale and inventory management features.
• Process transactions and generate invoices, receipts, and financial reports.
• Send push notifications related to your business alerts and activities.
• Authenticate your identity and protect your account.
• Improve and optimize the App's performance and user experience.
• Comply with legal obligations.

3. Data Storage and Security

Your data is stored securely on our servers using industry-standard encryption protocols. We implement the following security measures:

• All data transmissions are encrypted via HTTPS/TLS.
• Passwords are securely hashed using bcrypt.
• Access to your data is protected through JWT-based authentication.
• Regular security audits and updates are performed on our infrastructure.

4. Data Sharing

We do not sell, trade, or rent your personal information or business data to third parties. We may share information only in the following circumstances:

• With your explicit consent.
• To comply with legal obligations, court orders, or government requests.
• To protect the rights, property, or safety of NEXTONE, our users, or the public.

5. Third-Party Services

The App uses the following third-party services, each governed by their own privacy policies:

• Google Sign-In: For authentication. Google Privacy Policy
• Firebase Cloud Messaging: For push notifications. Firebase Privacy

6. Data Retention

We retain your account and business data for as long as your account is active or as needed to provide the App's services. You may request deletion of your data at any time by contacting us.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your personal data.
• Export your business data in a portable format.
• Opt out of non-essential data collection.

8. Children's Privacy

The App is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page with an updated "Last updated" date.