Privacy policy

Bhupu Sainik Mini Mart ("we") runs BSMM. Effective 1 January 2027. Website: https://bhupusainikminimart.com.np. Questions: khattribimal90+bsmm@gmail.com.

What we hold

• Your account: name, email, password (stored hashed by our provider), optional phone. If you sign in with Google or Apple, we receive your name, your email (Apple may give a private relay address instead) and an account id from them. We never see your Google or Apple password.
• Your shops: each shop's name, phone and address; who works in it; invitations, which hold the email you invited.
• Your shop's records, once synced: products, photos, stock, sales, purchases, expenses, partners, and customers' and suppliers' names, phones, addresses and notes. You type these in. If you record other people, you are responsible for having a good reason to, and for telling them.
• Files you attach to bills and orders, and files kept in a shop's Shop files (its logo, papers, photos). Everyone in that shop can see, change and delete them. A link you copy or share opens that one file for anyone who has it, for 7 days.
• This phone: an id for this install of the app, and a token that lets us send it notifications, kept with your account.
• Technical data: our provider's sign-in and server logs, including IP addresses, kept briefly. If crash reporting is on: crash reports with device model and system version, and no shop records. If it's on, which screens of the app are opened, counted by Google Firebase Analytics with an id for this install of the app, and never with your name, email or shop records.

What we do with it

Run the app: keep your shops in step across phones, let people in the same shop work together, send the notifications the app offers, and count which screens are used, to improve the app. Nothing else. No advertising, no selling data, no tracking across apps.

Who else can see it

• People in the same shop see that shop's records, and each other's name, email and phone. You join a shop only by accepting an invitation. If you leave a shop or are removed from it, what you recorded stays as that shop's, and its members still see your name and email, marked as no longer there, so they can invite you back. Deleting your account takes your email off that list; each shop keeps your name on it, marked as deleted, as its record of who worked there.
• Our service providers: Supabase (database, sign-in, file storage; servers in India, Mumbai), Google Firebase (counting screen views, delivering notifications, and crash reports if crash reporting is on), Apple (delivering notifications to iPhones), Google or Apple if you sign in with them, and our email provider for sign-in codes.
• Authorities, if the law requires it.

On your phone

The app keeps each shop in its own folder, in the app's private storage. The operating system encrypts it when your phone is locked; the app adds no encryption of its own. An app lock can cover the screens. On iPhone your phone's backup may include this data. On Android the app is excluded from system backup. Your sign-in stays in the phone's secure storage and doesn't move to another phone. Backups you make are files you control; protect them with a password when you share them.

How long

Until you delete it. Deleted customers and suppliers lose their name, phone, address and notes at once; amounts on old bills stay, since the shop's accounts need them. A closed shop's records and files are removed from our servers within a day, and from a phone when that phone next connects. Unconfirmed accounts go after 7 days. Logging out removes this phone's notification token.

Deleting your account

In the app: More > My account > Deactivate or delete account > Delete account. Or at https://bhupusainikminimart.com.np/delete-account. If you own a shop with other people in it, hand it over or close it first. Shops with only you in them close with your account. Records and files you added to someone else's shop stay in that shop, as its own, and it keeps your name on its list of people who worked there, marked as deleted. Nothing else of yours stays: no email, phone or way to reach you. To take a break instead, deactivate: nothing is deleted, and logging in brings you back.

Your rights

You can see and change your details in the app, and delete them as above. Write to khattribimal90+bsmm@gmail.com for anything else.

Children

Not for anyone under 16.

Changes

We'll say so in the app before a change that matters.

This website

You don't need an account to read this site, and it doesn't use advertising trackers.

• The contact form. What you write (your name, email, and phone and shop name if you give them) and when, so we can reply. Only Bhupu Sainik Mini Mart can read it. To stop the form being misused we also keep a scrambled code made from your connection's address, which can't be turned back into it. Ask us and we'll delete your message.
• The app link (/share). When you open it, we count the visit: the kind of device, the country, the page that sent you and a code made from your connection's address that changes every day, so a visit can't be followed from one day to the next. No cookies.
• Visitor statistics. Microsoft Clarity shows us how people use these pages (where they click and how far they scroll), without names, and hides what you type into forms. It sets cookies; Microsoft's privacy statement applies to that data.
• Hosting. Like every website, our host keeps standard server logs (such as the address and the page asked for) for security.

Questions: khattribimal90+bsmm@gmail.com.