Kasira POS · Published by G Labs
Privacy Policy
Last updated 11 August 202612 sections
Kasira POS (“Kasira”, “the app”) is a point-of-sale app for small shops, warungs and cafés, published by G Labs. This policy explains what the app does with your information.
1. Who we are
Kasira POS is published by G Labs. If you have any question about this policy or about your data, contact us on WhatsApp at +62 851-2802-5065.
2. What Kasira stores on your device
Everything you enter while using Kasira is stored in the app’s own private storage on your device, which other apps cannot read:
- Business details — store name, address, phone number, receipt footer, logo, tax settings, currency.
- Catalogue — products, prices, categories, barcodes, stock levels, product photos.
- Sales records — orders, order items, payments (cash or QRIS), refunds, voids, discounts, shifts and cash counts, tables and bills.
- Staff records — staff names, their role (owner or staff), and a cryptographic hash of their PIN. PINs themselves are never stored; they are hashed with PBKDF2-SHA256 and cannot be recovered from the stored value.
- App settings — language, currency, theme, printer configuration.
- A device identifier — see section 4.
We cannot see any of this. It is on your device, not on a server.
3. Permissions Kasira asks for, and why
| Permission | Why Kasira needs it |
|---|---|
| Camera | To scan product barcodes at the till, and to take photos of your products. Images are used on your device only. No video or audio is ever recorded. |
| Photos / media | To let you pick a product photo, your shop logo, or your static QRIS image from your gallery. The chosen image is copied into the app’s private storage. |
| Bluetooth / Nearby devices | To find and connect to your Bluetooth thermal receipt printer. Kasira only discovers and connects to printers. |
| Location (Android 11 and older only) |
On Android 11 and older, the operating system itself required location permission before an app could discover any Bluetooth device. Kasira uses it for nothing else, never records or transmits your location, and does not request it at all on Android 12 or newer. |
You can refuse any of these. Refusing camera means you cannot scan barcodes; refusing Bluetooth means you cannot print. The rest of the app keeps working.
4. Device identifier
Kasira derives a device identifier from your device’s Android ID, immediately hashes it with SHA-256, and stores only the shortened hash. It is used to tie an activation key to a single device so a licence cannot be copied between phones, and to label stock movements when you use more than one till.
This identifier is included in the pre-filled message when — and only when — you tap “Contact support”. It is not collected in the background and not shared with anyone else.
5. When information leaves your device
Only ever because you chose to send it:
- Backup / export. Tapping “Export Data” writes a backup file and hands it to Android’s share sheet. You choose where it goes — Google Drive, WhatsApp, a file on your phone. We never receive it.
- Sharing a daily report. Same: the text goes wherever you send it.
- Contacting support. Opens WhatsApp with a message pre-filled with your store name, hashed device id, licence status, and app version, so we can help without a back-and-forth. You can edit or delete any of it before sending. Once you send it, the message is handled under WhatsApp’s own privacy policy.
Kasira makes no other network requests. There is no background sync, no telemetry, and no automatic upload.
6. Payments
Payments you record in Kasira are not processed by Kasira. When you mark a sale as paid by cash, Kasira does arithmetic and writes a record. When you show a QRIS code, Kasira displays an image you chose from your own gallery. Kasira never touches your customer’s money, card details, or bank account, and it is not connected to any payment gateway.
Buying Kasira itself is handled by Google Play Billing. Your payment details go to Google, never to us — we only ever learn that a purchase exists. See Google’s Privacy Policy.
7. What we do not do
- No analytics, crash reporting, or usage tracking of any kind.
- No advertising and no advertising identifiers.
- No third-party SDK that collects data.
- No selling or sharing of your data — we do not hold it, so there is nothing to sell.
- No accounts, so nothing to link across devices or apps.
8. Children
Kasira is a business tool for shop owners and their staff. It is not directed at children and we do not knowingly collect information from anyone under 18.
9. Your control over your data
- See it — it is all visible in the app.
- Correct it — edit or delete products, staff, orders, and settings in the app.
- Take it with you — Settings → Backup exports everything as a file you own.
- Delete it — uninstalling Kasira permanently erases all of it. Automatic Android backup to Google Drive is deliberately switched off for this app, so uninstalling really does remove your data rather than leaving a copy in the cloud.
Because Kasira has no accounts and holds nothing on a server, there is no account for us to delete and no data of yours for us to hand over or erase on request.
10. Security
Data lives in app-private storage that other apps cannot read. Staff PINs are stored only as PBKDF2-SHA256 hashes with a random salt. Activation keys are verified on-device using Ed25519 signatures. Please also protect the device itself with a screen lock, and turn on Kasira’s PIN lock if staff share the till.
11. Changes to this policy
If this policy changes we will update this page and change the date at the top. Material changes will be noted in the app’s release notes on Google Play.
12. Contact
Questions, or want a copy of this policy in Bahasa Indonesia? Message us on WhatsApp at +62 851-2802-5065.