This policy describes how the Tillio POS mobile app (“the app”) collects, uses, stores, and shares information. Tillio is a business operations product: sales, stock, expenses, contacts, field visits, fleet, and related records for a subscribed business. The same account is used on the Tillio website at tillio.digifrica.com.
This policy is issued by the operator of that Tillio service (“we”, “us”). It applies to the Android app listed on Google Play as Tillio POS. It does not cover third-party apps you open from Tillio (for example WhatsApp, Maps, or your phone’s camera app).
1. Who this app is for
Tillio is for businesses and their staff. It is not directed at children. We do not knowingly collect personal information from anyone under 13. If you believe a child has created an account, contact us using the details below and we will delete it.
2. Information we collect
We collect only what is needed to run the business account you sign into. What appears on a given phone depends on that person’s role and the business’s active subscription.
Account and identity
- Email address or username, name, and password (or a Google sign-in token). The password is sent to our server to sign you in and is never stored on the phone.
- Access and refresh tokens, kept in the phone’s secure storage so you stay signed in.
- Business name, location of the business (country, branches), plan, and permissions granted by the business owner.
Business records you enter
Depending on modules in use, this includes sales, invoices, payments, stock, purchases, expenses, contacts and customer details (names, phone numbers, addresses), CRM notes, field-visit reports, farmer directories, fleet trips and defects, cash-drawer activity, legal-matter notes, and similar operational data. Colleagues in the same business with the right permission can see the records their role allows.
Photos, scans, and files
When you attach evidence we upload the file you chose: receipts, vehicle defects, stock or mortality photos, field-visit pages, business-card pictures, PDFs or spreadsheets for directories. Photos are taken or picked at your request. We do not browse your gallery in the background.
Business-card text is read on the phone (on-device text recognition). The picture is not sent to a third-party OCR service to be read. After you confirm the contact, the contact details (and any photo you keep) are stored with the business on our server like other records.
Location (only when you act)
The app may read the phone’s location while you are using it, never in the background, and only for:
- Fleet trip milestones — when a driver taps a milestone, we attach that moment’s coordinates if the phone can provide them. A denied or missing fix still saves the milestone without a location.
- Field visits — when you capture a visit or soil/site point, we attach GPS (or a location you type, with a reason).
You can refuse location permission. The rest of the app continues to work.
Notifications
If you allow notifications, we store a Firebase Cloud Messaging token for this phone so we can alert you (for example stock running low, trip costs to approve, cash handed to you). You can turn kinds of alerts off in Account → Notifications. Signing out unregisters this phone.
Device information
- A random install identifier (not your IMEI or hardware serial). It is used so this phone can renew sign-in and so offline receipts from two tills in the same shop do not collide.
- App version and platform (Android), so we can show an update when a newer Play Store build exists or when the business sets a minimum version.
- Network state, so queued work can send when the connection returns.
What we do not collect for advertising
We do not use third-party advertising networks, do not sell personal information, and do not use your data to show ads from other companies. The app may show Tillio’s own plan or module offers to the signed-in business.
3. How we use information
- To authenticate you and apply the business’s permissions and subscription.
- To store and sync the operational records you and your colleagues create, including while offline (queued on the phone until they reach the server).
- To send service notifications you have allowed.
- To provide Google sign-in (Firebase verifies the Google account; our server then issues a normal Tillio session).
- To support, secure, and improve the service (including diagnosing failures and enforcing a minimum app version).
- To process subscription and billing for the business, as shown on the Tillio website.
4. How we share information
We share data only as needed to operate Tillio:
- Your business. Owners and staff see records according to roles the business sets.
- Our hosting and Tillio servers at tillio.digifrica.com, over HTTPS in production.
- Google / Firebase. Google sign-in and push delivery. Google’s terms and privacy policy apply to those services.
- Google Play. In-app updates and the store listing. Play may process device and install information as described by Google.
- Apps you choose to open. Sharing an invoice to WhatsApp, calling a contact, or opening a map is done by you on the phone; those apps receive only what you send.
- Legal requests. If required by law or to protect the service, a user, or the public.
We do not sell your information.
5. Storage on the phone
The app keeps a local copy so work can continue offline: products, contacts, unsent records (the outbox), field-visit drafts and photos, language and notification preferences, and the random device id. Session tokens sit in the platform keystore. Uninstalling the app deletes the on-phone copy. Unsent records stay until they reach the server or you clear that data; they are not wiped merely because you sign out (so the same person can send them after signing back in).
6. Retention
Account and business records stay on our servers for as long as the business account is active and as needed for legal, tax, or dispute purposes after that. Push tokens are removed when you sign out or when they stop working. You can ask us to delete an account as described below.
7. Security
Production traffic uses HTTPS. Passwords are not stored on the device. Tokens are stored in secure storage. Access inside a business is limited by the permissions the owner assigns. No method of transmission or storage is completely secure; please use a strong password and sign out of shared phones.
8. Your choices
- Refuse or revoke location, notifications, camera, or photos in the phone’s settings. Features that need that permission will stop; the rest of the app still works.
- Turn notification kinds off in Account → Notifications.
- Sign out. This phone stops receiving that person’s push messages.
- Correct business records in the app or on the website, within your permissions.
9. Access, correction, and deletion
To view or change account details, use the app or the Tillio website with your login.
To delete a user account or an entire business (and the personal data tied to it), the business owner should use the account controls on the Tillio website, or write to us via tillio.digifrica.com from the email on the account. We will delete or anonymise personal data we hold unless we must keep it for legal reasons (for example invoices already issued). Shared business records that other staff still need may be retained without the deleted person’s login.
If you are a customer of a Tillio business (for example your name is on an invoice), that business is the controller of that record. Ask them to correct or remove it; we process it on their instructions.
10. International processing
Tillio is used by businesses in more than one country. Your information may be processed on servers and by service providers (including Google) outside the country where you use the app. We do so to provide the service you requested.
11. Changes
We may update this policy. The “Effective” date at the top will change. Material changes will be posted at this URL. Continued use of the app after the change means you accept the updated policy.
12. Contact
Privacy questions, access requests, and deletion requests:
Tillio
https://tillio.digifrica.com
Android package: tillio.pos
Please include the email on the Tillio account so we can identify it.