PosTree
Privacy Policy.

1. Who we are and scope

This policy applies to PosTree on Android, iOS/iPadOS, macOS, and Windows. PosTree is developed by Quantify Nexus LLC, Pristina, Kosovo.

The business activating PosTree administers the use of its staff, customer, and operational data. Quantify Nexus processes service data under its agreement with the business and applicable law.

2. Information that may be processed

• Activation/licensing: device, POS, unit, company and entitlement identifiers and activation status.
• Business/fiscal: business name and identifier, VAT, address, operator, fiscal configuration, receipts, returns, cancellations, and reports.
• Users: username, name, role, status, and local password/PIN hash. The Accountree password is not stored in PosTree.
• Retail: articles, barcodes, categories, units, prices, VAT, stock, and sale data.
• Transactions: lines, quantity, price, discount, payment method/amount, cash-register shifts, and audit data. We do not seek to store full card numbers or CVV.
• Optional customers: name/company, identity/VAT number, address, city, phone, email, and notes.
• Technical: version, network state, sync time/status, errors, security attempts, and integrity logs.

3. Sources and purposes

Data is entered by the business/users, created during sales and fiscalization, or synchronized from Accountree and configured fiscal services.

• Activation, licensing, authentication, and role control.
• Checkout, catalog, customer, stock, cash-register, and reporting functions.
• Creation, signing, submission, printing, and audit of fiscal documents.
• Accountree synchronization, security, backup, restore, and legal/contractual compliance.

4. Device permissions

On Android, PosTree requests only internet and network-state access. Barcodes are entered by keyboard or a connected scanner. The app does not request camera, location, contacts, or microphone permission. Export, printing, and file selection occur only on user action.

5. Data disclosure

• Accountree/Quantify Nexus API for authorized activation and synchronization.
• Kosovo Tax Administration or the configured fiscal service.
• The business SMTP/email provider only when a receipt or report is sent.
• Platform, hosting, and security providers necessary for the service.
• Authorities or advisers when legally required.

6. Advertising and sale of data

Quantify Nexus does not sell personal data or use it for targeted advertising. The current build has no advertising SDK or advertising ID. Any future optional analytics will be disclosed before activation.

7. Storage, transfers, and security

PosTree is offline-first: data is stored locally and selected data is synchronized over HTTPS with configured services. Processing may occur where provider infrastructure is located, subject to appropriate safeguards.

• Encrypted local SQLCipher database.
• Secrets and keys in secure storage where supported.
• HTTPS, request signing, and replay protection.
• Password/PIN hashing, roles, lockout, audit logs, and integrity controls.

8. Retention

Local data remains until the business deletes it, resets/removes the app, or applies its policy. Fiscal, accounting, and audit records may be retained longer where required by law, contract, or integrity rules. Backups are managed by the business.

9. Access, correction, and deletion

Contact the business administering the installation first. For Quantify Nexus service data, email [email protected]. We may verify identity/authority. Fiscal or audit records are not deleted where statutory retention applies.

10. Children, changes, and contact

PosTree is a business application and is not directed to children. We may update this policy when features, providers, or law change. Questions may be sent to [email protected].