Privacy Policy — MedStore App for Android

1. MedStore App Offline — your data stays on your device

The Offline app stores your business data — stock, batches, customer bills, invoices, customers and suppliers — locally on your device, in a database on the device itself. Your business data is not transmitted to or stored on our servers during normal use, and it is not shared between devices.

1.1 When the Offline app connects to our service

• Linking your phone — a one-time device-code pairing that links the app to your MedStore account.
• Licence check — from time to time the app checks your licence with our accounts server. If the app cannot verify your licence for a long period, it becomes read-only and shows a message at the top of the screen. Your data stays on your device.
• Technical status message — a small, best-effort message about the app and device, described in 1.2.
• Optional cloud invoice scan — only if you choose to use the invoice-scan feature, the specific invoice image you select is sent to our service to be read, and the result is returned to your device.

1.2 Technical status message

About once a day, when the device happens to have an internet connection, the app sends our servers a small technical message so we can operate device licensing, understand how many devices are active, provide support, and detect misuse of licences. The attempt is best-effort — if there is no connection it is skipped, with no retry, and the app works the same either way. The message contains only:

• App version and build number
• Device and activation identifiers — a randomly generated device ID and, if your device is linked, its pairing/device code
• Licence and trial status (for example: on trial, trial ended, or active) and days remaining
• Device model and Android version
• Your internet (IP) address, and an approximate location (city/region) derived from it on our servers

It contains no business or customer data — no stock, invoices, bills, customers, suppliers, or anything you enter into the app. We do not collect precise or GPS location. This information is used only to run our licensing, for our own support and analytics, and to prevent licence abuse. It is not sold or shared with third parties.

1.3 Permissions the Offline app uses

• Internet — used for the connections described in 1.1.
• Device authentication (biometric / screen lock) — used to protect access to the app. Fingerprint or face verification is performed entirely by Android; your biometric data is never accessed by, shared with, or stored by us.

The Offline app does not request the Camera permission. When you capture an invoice photo, the app opens your device's own camera app, which returns the picture. The picture is saved on your device and is only sent to us if you use the optional cloud scan. When you import a file, you pick it through Android's system file picker; the app does not request broad access to your storage. It triggers no permission prompts on start-up and requests no location, contacts, microphone or advertising-identifier permissions.

1.4 Saving a copy, restoring and deleting your data

Save a copy of my data. In the Offline app you can save a copy of your data as a .zip file to a place you choose on your phone, for example Files, Google Drive or WhatsApp. You can later restore it inside the app using "Restore from a saved copy". Saving and restoring work without internet. We do not receive the copy and we never see where you save it.

The saved copy is not encrypted. It contains your business and customer data, so keep it safe and share it only with people you trust.

Android system backup. Android's automatic system backup does not include your store data in the Offline app. Use "Save a copy of my data" regularly.

Deleting. Your business data lives on your device. Uninstalling the app deletes the data on your phone. We cannot recover it for you, because we never receive it. If you want to keep it, save a copy first.

2. MedStore App (Online) — your data is stored in our cloud service

The Online app opens your MedStore store from our cloud service (portal.medstoreapp.in) inside the app. Your business data is stored on our servers in India, not on your phone, and it needs an internet connection. How we store it, how long we keep it, and your rights over it are described in our main Privacy Policy.

2.1 What the Online app itself does on your phone

• Signs you in. Like a browser, the app keeps your sign-in session (cookies and local storage) inside the app so you stay signed in. Signing out ends the session.
• Prints bills. If you set up a printer, the app sends the bill you choose to print to a Bluetooth or USB printer.
• Scans barcodes. If you use barcode scanning in the store, the app uses the camera for that.
• Lets you pick files. When you choose a file to upload in the store, the app opens Android's file picker.

The Online app contains no third-party analytics, advertising or tracking SDKs. We do not sell your data and we do not use it for advertising.

2.2 Permissions the Online app uses

• Internet — to load your store from our cloud service.
• Camera — only for barcode scanning, when you use it.
• Bluetooth (nearby devices) and USB — to find and print to your receipt printer. The app asks before connecting to a USB printer.
• Location (Android 11 and older only) — Android itself requires this permission on those versions before an app can search for Bluetooth printers. The app does not use it to find where you are. On newer Android versions the app does not request it.
• Notifications and foreground service — Android shows a notification while the app is searching for or connected to a Bluetooth printer.

2.3 Deleting your data

Your business data is held in your MedStore account. You can export it, or ask us to delete your account and its data, as described in the main Privacy Policy. Uninstalling the app removes the app and its stored sign-in session from your phone but does not delete your account.

3. Security

All communication between the apps and our servers is encrypted using TLS/HTTPS. Access to the Offline app can be protected with your device's screen lock or biometrics.

4. Your MedStore account

Both apps are linked to a MedStore account. What we hold about your account, how long we keep it, and your rights over it are described in our main Privacy Policy. MedStore App is available only in India.

5. Contact us

If you have questions about this policy or wish to exercise your data rights, contact us:

• Email: info@progalaxyelabs.com
• Phone: +91 7075190199

Published by: Progalaxy eLabs Pvt. Ltd., India

6. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page.