Privacy Policy

Last updated: 29 October 2026

This policy explains what data Smart Kassa (the Android app Kassa Pos and the website kassapos.uz) — a program for shops: checkout, inventory, installments and reports — collects, how it uses that data and how it protects it. By using the program you confirm that you have read these terms.

In short: your data is not sold. A shop's data is stored in that shop's own database and is visible only to the shop's staff. Inside the program (the Android app and the checkout program) there is no advertising and there are no third-party tracking (analytics) services. Only on the kassapos.uz promotional website is a Google Ads tag used to measure the results of our advertising (see sections 2 and 5).

1. Who controls the data

The program is provided to shops by the Smart Kassa team. Each shop (organization) owns the data about its own customers, products and sales; we store and process it only to provide the service. Contact details are in section 9.

2. What data is collected

Account data: user login, name, role (cashier, accountant) and password. The password is not stored in plain text — it is stored using one-way hashing (scrypt).
Shop data: products, prices, stock levels, sales, receipts, payments, cash register and shift records, expenses, suppliers.
Customer data: the customer's name, phone number and address entered by shop staff. For installment sales, where required by law and by the contract, a passport number and photos of documents may also be entered — the shop owner does this on their own responsibility.
Photos: product photos and installment document photos. They are uploaded only when you yourself choose the camera or the gallery.
Voice: the “Voice” feature (optional, on a paid plan) sends microphone audio for real-time processing. The audio recording is not stored.
Technical data: if an error occurs in the program, the error text, the page address, a short indicator of the browser/device type and the user role are written to the server log (not to the database). The IP address of server requests is used temporarily for security and abuse prevention.
Website visitors (kassapos.uz only): the website runs a Google Ads tag (gtag.js). It may set cookies in the browser and send technical information about the visit (IP address, browser and device type, the page opened, a click on a call or Telegram link, a submitted request) to Google. The purpose is to measure whether our advertising leads you to contact us. The name and phone number you enter in the request form are not sent to Google: they go only to our server so that we can contact you. This applies to the website only: the app and the checkout program contain no such code.

3. Permissions (Android)

Internet — to send data to and receive data from the server.
Camera — for scanning barcodes and taking photos; only when the relevant button is pressed.
Microphone — only when the “Voice” feature is started.
Notifications — for important messages (optional).

You can turn a permission off at any time in the phone settings; the related feature will then stop working, while the rest keeps working.

4. Why we use the data

running the checkout, inventory, installment and report functions;
signing in and managing user permissions (cashier/accountant);
finding faults, ensuring security and improving the quality of the service;
at the shop owner's request — sending a daily report and a backup copy via Telegram;
running the optional AI assistant and voice features (section 5).

5. Third parties

We do not sell shop and customer data and do not pass it to advertising networks. Only when needed for the service to work:

AI assistant and voice conversation (optional): the text of the question and the answer (in a voice conversation — the voice) is sent through our central service to OpenAI. The program uses only aggregated figures (totals, lists) from the shop database; customers' phone numbers, passports and photos are not sent to the AI.
Telegram (optional): if the shop owner turns it on, reports and backup copies are sent to their Telegram chat.
Google (kassapos.uz website only): a Google Ads tag to measure advertising results. You can turn cookies off in your browser settings or at adssettings.google.com.
Server services: the server and network (hosting) providers on which the database runs — they use the data only for storage and transmission.

Data may be provided to authorized state bodies where the law requires it.

6. Where the data is kept and how it is protected

Each shop's data is stored in a separate database; other shops cannot see it.
Communication between the app and the server uses HTTPS (an encrypted channel).
Passwords are stored hashed, staff permissions are limited by role, and important actions are written to a log.
Backup copies of the database are made regularly.

No system is 100% secure, but reasonable measures are taken to protect the data.

7. Retention and deletion

Data is kept while the shop uses the service. If you want your account and the related data deleted, or want a copy of it, send a request through the contact details below — after confirming your identity we will delete the data (usually within 30 days), except for the part that the law requires to be kept. A shop owner (accountant) can also delete a staff account in the program itself. A customer's request about installment document photos is handled in the same way.

8. Children

The program is intended for business and is not aimed at people under 18. We do not knowingly collect data of minors.

9. Contact

For questions, requests or complaints:

Phone: +998 50 571 65 15
Telegram: @aero_one
Website: kassapos.uz

10. Changes to this policy

The policy may be updated from time to time. The new version is published on this page and the “Last updated” date above changes. If there are significant changes, we will notify you through the program.