Privacy Policy

Last updated: 24 October 2026

We keep this policy short and plain. It covers the ShopMaz app and these website pages.

Summary

ShopMaz is a record-keeping app for small shops. We store the business data you enter so you can run your shop, we do not sell it, and your records are never shared with advertisers. This page explains what we collect, why, who processes it, and how you can delete it.

Who we are

ShopMaz is built and operated by Mazhar Islam, trading as MAZ Solutions, Karachi, Pakistan. For any privacy question or request, write to shoppmaz@gmail.com.

Information we collect

Account information. If you sign in, we store your email address or Google account identifier, and the display name and picture you choose for your profile.

Business records you enter. Products (including photos), prices, stock, sales, customers and their phone numbers, suppliers, expenses, credit ledger entries, staff names, settings and backups. These are stored in your private area of Google Firebase (Authentication and Cloud Firestore). Security rules allow only your signed-in account, and team members you invite, to read or write it.

Team members. If you invite staff, we store their Google email and the permissions you choose.

Messages and enquiries. When you contact us from the app, we store your message, topic, optional screenshot and the email you signed up with, so we can reply and show you our answer. Business plan enquiries also store the details you type, such as business name and phone number.

Plan payments. Paid plans are paid outside the app (for example Easypaisa, JazzCash or bank transfer). We store the plan, amount, payment method, the transaction ID you send and the status. We do not receive or store your card or bank login details.

Refer and Earn. If you use referrals we store your referral code, who referred you and reward status. The leaderboard shows only a short display name and counts.

Online shop link. If you switch it on, the shop name, currency, WhatsApp number, product names, prices and availability you choose are public to anyone with your link. Costs, customers and sales are never included.

Technical data. Our service providers may receive your IP address, browser and device type, app version and pages visited. If something goes wrong, an error report is sent to our error-monitoring service (Sentry). We remove shop data, cookies and personal identifiers from these reports and limit how many are sent.

On your device. Preferences (theme, language, receipt paper size, ad choice), your PIN lock setting, Mazy chat history and, in guest mode, all your records are kept in your browser storage on your device.

Device permissions

ShopMaz asks only when you use a feature. You can change each permission in your browser or phone settings at any time.

Camera: to scan barcodes and QR codes, and to take product or profile photos. Images are processed on your device. A photo you save is stored as part of your product or profile.
Microphone: only for voice questions to Mazy. Speech is turned into text by your browser's speech service.
Notifications: for stock, credit and daily summary alerts. We store a random notification ID and your browser's push address to deliver them.
Contacts: only if you choose to pick a customer's phone number from your contacts. We read only the contact you pick.

ShopMaz does not use your location.

Mazy AI assistant

When you ask Mazy a question, the question and a short text summary of your shop (such as product names and quantities, credit balances and sales totals) are sent to the ShopMaz AI service running on Cloudflare, which forwards them to an AI provider (Google Gemini, Groq or Cloudflare AI) to produce the answer. You must be signed in. We do not use this data for advertising. Your chat history stays on your device. Please do not type information into the chat that you do not want processed this way.

Advertising and cookies

The free Starter plan may show ads served by Google AdSense on a few read-only screens. Google and its partners use cookies and similar technologies to serve ads based on prior visits and to measure performance. When ads are on, you choose Accept (personalised) or Limited ads (non-personalised), and you can change this later in Settings → Ad preferences. Paid plans do not show ads.

Manage Google ad personalisation at adssettings.google.com. Learn how Google uses data from partner sites at policies.google.com/technologies/partner-sites. Ads never appear on login, sale, receipt, settings or form screens, and your business records are never shared with advertisers.

How we use information

To provide, secure and improve the app.
To keep your account and data available across devices.
To answer support requests and send service messages you ask for.
To activate and manage paid plans.
To prevent abuse and fix errors.
To show and measure advertising on the free plan, subject to your choice.

We use the following service providers, each under its own privacy policy. We do not sell personal information.

Google Firebase (authentication and database) and Google Sign-In.
Cloudflare (the AI and notification services).
Google Gemini, Groq and Cloudflare AI (answers for Mazy).
Sentry (error reports).
Google AdSense (ads on the free plan) and Google Fonts (fonts on our website pages).

We may also disclose information if the law requires it, or to protect the rights and safety of our users and service.

How long we keep data

Your records are kept while your account exists. When you ask us to delete your account we delete your account and shop data as described below. Some limited records, such as plan payment confirmations, may be kept for accounting and legal reasons. Backups made by our providers expire on their normal schedule.

Delete your account and data

You can ask us to delete your account and all data stored for it at any time.

In the app, open Settings → Contact us, choose the Privacy topic and then Delete my account (or Delete my data to keep the account).
Or email shoppmaz@gmail.com from the address you signed up with, with the subject "Delete my ShopMaz account".
We may ask you to confirm the account is yours. We then delete the account and its data within 30 days and tell you when it is done.

Deletion is permanent. Export a backup first from Settings → Data backup & export if you want to keep a copy. In guest mode your data exists only on your device, so you can remove it by clearing the site data in your browser.

Security

Data travels over HTTPS and is stored in Google Firebase with per-account security rules. You can lock the app with a PIN or fingerprint. No online service is perfectly secure, so please keep your login private and take regular backups.

Your choices and rights

Access and download your data from Settings → Data backup & export.
Correct your data in the app, or ask us to correct it.
Ask us to delete your data (see above).
Turn off notifications, camera or microphone in your device settings.
Choose limited ads, or upgrade to a paid plan to remove ads.

Depending on where you live, you may have further rights under local law. Write to us and we will help.

Children

ShopMaz is built for shop owners and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has given us information, tell us and we will delete it.

Guest mode

In guest mode nothing you enter is sent to our servers. Data stays in your browser storage and is lost if you clear browser data, so export backups regularly.

Changes to this policy

We may update this policy. When we make a significant change we will change the date above and, where we can, tell you in the app. Continued use after a change means you accept it.

Contact

Privacy questions and requests: shoppmaz@gmail.com. MAZ Solutions, Karachi, Pakistan.