Cozy Counter Privacy Policy

Last updated: October 28, 2026

Cozy Counter is an offline order book for small shops. This policy explains how the app and its Premium verification service handle information. For privacy or support questions, contact wizplayo.developer@gmail.com.

Your shop records stay on your device

Products, photos, customer details, notes, orders, stock movements and payment records you enter are stored in the app's local database and private storage. We do not automatically upload these shop records to our servers. The app does not provide cloud synchronisation or a Cozy Counter account.

You choose whether to export a CSV, backup, order slip or report, and whether to share or print it through Android. Exported files can contain personal or business information. The recipient or storage provider you select handles those files under its own terms. Keep backups somewhere you trust.

Android may also back up or transfer app data through its operating-system services, depending on your device and backup settings. Those services are controlled by Android or your device provider, not Cozy Counter's shop-data servers. Licence credentials and the installation identifier are excluded from Android backup and device transfer. You control system backup separately in your device settings.

Premium purchases

Google Play handles the purchase transaction and the purchasing Google account. We do not receive your payment-card number. To verify or restore the optional Premium upgrade, the app sends a Google Play purchase token, a randomly generated app-installation identifier and a request nonce over HTTPS to our verification service. That service checks the purchase with the Google Play Developer API and returns a signed licence.

The installation identifier is generated for this installation. It is not your advertising identifier, IMEI, phone number or Google account email. The licence is bound to that installation. Purchase tokens and signed licences are held in encrypted app-private storage protected by Android Keystore, separately from your shop backups.

A verified lifetime licence can work offline. Ownership is checked again when the app can connect; a refund, revoked purchase or account change can remove the purchased entitlement. Shop records remain available under the Free plan.

Tester activation codes

If you choose to enter a tester code, the app sends the code, its installation identifier and a nonce to the verification service. A tester campaign has one shared code and one fixed expiry 21 days after the campaign is issued. Activating later or entering the same code again does not extend that date.

The service stores the campaign identifier, a hash of its code, its issue and expiry times, an optional campaign title and any revocation time. It does not store the plaintext code in the campaign database or create a customer profile from an activation. A signed tester licence can be cached privately on the device. Expiry or revocation returns the app to Free without deleting shop records. A separate valid lifetime purchase is preserved.

Google Play reviewer access

If a private reviewer credential is provided for an app review, entering it sends the credential, an installation identifier and a nonce to the verification service. The service compares a hash of the credential and returns a signed reviewer licence, separately from purchases and tester campaigns. The credential can be reused while enabled; each cached reviewer licence lasts up to seven days and can renew online. Disabling the credential stops renewal, while a cached licence may remain usable until its signed expiry. Reviewer access does not upload shop records. The plaintext reviewer credential is not stored in the app's licence cache or request logs.

Service providers and network information

Google Play and Google APIs provide purchase processing and verification. Cloudflare hosts the verification service and tester campaign database. These providers process the technical information necessary to deliver their services. Requests include ordinary network metadata such as an IP address; our service uses request information for rate limiting and security.

Our verification code processes purchase tokens and installation identifiers for the current request rather than adding them to a customer database. It does not log licence request bodies, raw purchase tokens, tester codes or private keys. Infrastructure providers may process operational and security information under their own policies. We do not sell shop records or licence data, use advertising SDKs, or use these identifiers for advertising profiles.

Permissions and reminders

You choose product photos through the system picker and choose backup files or save locations through Android's file interfaces. Optional notifications require your permission where Android requests it. You can turn reminders off in the app or Android settings. Reminders are scheduled locally; shop records are not sent to a push-notification service. System battery settings can affect delivery timing.

Retention and your choices

Your local records remain until you change them or clear the app's storage or uninstall it. Those system actions can permanently remove local records, so export a backup first if you need one. Exported files are managed by you and are not removed when the app is uninstalled.

The verification service retains tester campaign records to enforce their common expiry and revocation. Request processing data is kept only as needed for the request, rate limiting and provider security operations. We do not retain a server copy of your shop book. You may contact the support address above about information you have sent directly to support; please do not send card numbers or publicly post purchase tokens.

There is no Cozy Counter account to delete. You can remove local app data through Android settings, revoke notification permission, stop using licence features and manage Google Play purchases through Google Play.

For privacy or deletion requests about information held by the verification service or sent to support, contact wizplayo.developer@gmail.com. Include enough context to identify your request, and do not send payment-card numbers, purchase tokens or access credentials. Google Play controls its own transaction records under its policies.

Intended audience and changes

Cozy Counter is designed for small-business record keeping and is not directed at children under 13. We may update this policy when the app's data practices change. The date above will identify the current version.