Your Privacy Rights

As a ShopMng user, you have the following rights regarding your personal information:

1. Right to Know

You have the right to know:

• What personal information we collect about you
• The categories of sources from which we collect information
• The purposes for which we use your information
• Whether we share your information with third parties

How to exercise: Review our Privacy Policy or contact us for specific details about your data.

2. Right to Access

You can access all your personal data directly within the ShopMng app:

• Profile information (Settings → Profile)
• Customer contacts (Danh bạ)
• Product catalog (Mặt hàng)
• Orders (Đơn hàng)
• Expenses (Chi tiêu)
• Statistics (Thống kê)

3. Right to Correction

You can update or correct your information at any time through the app:

• Edit your profile in Settings
• Update customer, product, and order information
• Modify bank account details

4. Right to Deletion

You have the right to request deletion of your personal information. This includes:

• Deleting specific items (customers, products, orders, expenses)
• Deleting your entire account and all associated data

Note: Account deletion is permanent and cannot be undone. All your data will be permanently deleted within 30 days.

5. Right to Data Portability

You can export your data:

• Use the "Share" feature to export individual orders
• Request a complete data export by contacting us

6. Right to Opt-Out

You can opt-out of:

• Push Notifications: Disable in device settings or app settings
• Marketing Communications: We don't send marketing emails
• Data Sale: We do NOT sell your personal information to third parties

7. Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. You will receive the same quality of service regardless of whether you exercise your rights.

Do Not Sell My Personal Information

We do not:

• Sell your personal information for monetary or other valuable consideration
• Share your information with data brokers
• Allow third parties to use your data for their own marketing purposes

We only share your information with service providers (like Firebase) who help us operate the app, and they are contractually obligated to protect your data.

Submit a Privacy Request

Use this form to exercise your privacy rights. We will respond to your request within 7 business days.

California Residents (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

Categories of Personal Information We Collect

Disclosure of Personal Information

We disclose your personal information to the following categories of third parties:

• Service Providers: Firebase (Google) for authentication, database, and cloud messaging
• Authentication Providers: Google Sign-In, Facebook Login (only if you choose to use them)

Your CCPA Rights

• Right to Know: Request information about the personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we don't sell your data)
• Right to Non-Discrimination: Equal service and pricing regardless of privacy choices

How to Exercise Your Rights: Use the form above or email developer@pubb.dev

European Union Residents (GDPR)

If you are in the European Union, you have rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

We process your personal data based on:

• Consent: You have given consent for specific purposes (e.g., push notifications)
• Contract: Processing is necessary to provide the service you requested
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention)

Your GDPR Rights

• Right to Access: Obtain confirmation of whether we process your data and access to that data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Data Protection Authority

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state where you reside, work, or where an alleged infringement occurred.