ShopiQ Privacy Policy
ShopiQ is a shop-management app made by Qudexa. This page explains what it collects, why, where it is kept and how to have it removed. We do not sell data and we do not show advertising.
Who is who
For a shop's books — its products, sales, due book, suppliers and staff — the shop owner decides what goes in and is responsible for it; we keep it for them. For your own ShopiQ account(shop, customer or admin) we are responsible.
What we collect
- Shop accounts: shop code, shop name, owner name, phone, and a hashed PIN. We create these accounts; the app cannot.
- Customer accounts: name, phone number, optional address, and a hashed PIN.
- Shop books: everything a shop records in the app — products, prices, stock, sales, returns, discounts, customers on the due book and what they owe, suppliers, purchases, expenses, staff names, attendance and salary, stock counts.
- Orders: when a customer orders from a shop, the items, the shop, the customer's name and phone, and a delivery address if they choose delivery.
- Location: a shop's location, which the owner sets so customers can find it. A customer's location is used on the phone to sort nearby shops and is sent to our server only as a point to search around; we do not store it.
- Barcodes: when a code is scanned we look it up. Product names typed in by shops for a barcode are added to a shared catalogue so other shops can scan the same packet — names, units and categories only, never a shop's prices.
- Devices and security: a record of each phone that signs in (a label and the time it was last seen), IP addresses of sign-in attempts, and an audit log of changes our team makes to accounts.
- Camera and photos: used on the phone to scan barcodes and to photograph products. Barcode scanning happens on the phone; product photos stay on the phone.
Why
To run the service: signing in, keeping a shop's books backed up and in step across its phones, letting customers find shops and place orders, naming scanned products, and keeping accounts safe (lockout after repeated wrong PINs, cutting off lost phones, spotting stolen sessions).
Who else sees it
- A customer sees a shop's name, location, phone, opening status, products and selling prices — never cost prices, stock counts or anything from the books.
- A shop sees the name, phone and address of customers who order from it.
- Our service providers: Neon (database hosting) and our server host. When a barcode is not in our catalogue its number — and only its number — is sent to Open Food Facts, BarcodeNest or GTINHub to find a name.
- Nobody else, unless the law requires it.
Where and how long
Data is stored in a PostgreSQL database in Singapore and on the phone itself. A shop's books are kept while the account is active. When an account is closed we delete its books within 30 days, except records we must keep by law. Failed sign-in records are kept for at most 15 minutes of lockout use and then swept.
How it is protected
PINs and passwords are hashed with Argon2id and a server-side secret; the plain PIN is never stored. Sessions use short-lived tokens that rotate, and a reused old token cuts the device off. Traffic is encrypted in transit. Each shop's data is keyed to that shop and is never returned to another.
Your choices
- See or correct your details inside the app, or ask us.
- Ask us to delete your account and its data: email qudexaofficial@gmail.com from the phone number or account in question.
- Sign out every phone on an account from the app, or ask us to.
- Deny camera or location permission; the app keeps working without them, with manual entry instead.
Children
ShopiQ is a business tool and is not directed at children under 13.
Changes
If this policy changes in a way that matters, we will say so in the app before it takes effect.
Contact
Qudexa · Busan, South Korea · Dhaka, Bangladesh · qudexaofficial@gmail.com
Last updated: 27 September 2026 · Qudexa · qudexaofficial@gmail.com