GiroPS Privacy Policy
GiroPS (com.nowabooks.accounting) · Last updated: 2 October 2026
GiroPS is an app that helps small and medium-sized businesses track their stock and day-to-day bookkeeping from a phone. This policy explains what data we collect when you use the app, why we use it, who we share it with and what rights you have over it.
1. Who is responsible and how to reach us
The party that develops the app and processes your data is the GiroPS developer. For any privacy request or question: [email protected]
2. Data we collect
2.1 Your account details
- Email address — required to create your account and sign in.
- Name and profile photo — only if you sign in with Google or Apple; they come from that provider.
- User ID — a technical identifier used to link data to your account.
2.2 The business data you enter
This is content you create, and it is stored solely to provide the service to you:
- Products, warehouses, tags, stock movements and stock counts
- Invoices, quotes, orders, payments, cash/bank accounts and balances
- Customer and supplier records: name, phone, email, address, tax number, contact person and notes
- Product, business and contact images
2.3 Data accessed through device permissions
| Permission | What it is used for | Required? |
|---|---|---|
| Camera | Taking product and contact photos, scanning barcodes, and scanning receipts and IBANs. Barcode and receipt/IBAN recognition runs entirely on your device; those images and the recognised raw text are never sent to our servers or to third parties — only the values you confirm (amount, date, IBAN) are saved. | No |
| Contacts | When adding a customer or supplier, the name, phone and email of the single contact you pick are filled into the form. Your address book is never read in full, scanned or uploaded. | No |
| Location | Centring the map on where you are when you pick a customer's address. There is no background location tracking. | No |
| Notifications | Reminders and app announcements. | No |
| Phone call | Opening a contact's number in your phone app. No call log is kept. | No |
2.4 Technical data
- Crash logs and diagnostics — to find and fix errors (device model, operating system version, app version, crash stack).
- Performance measurements — to find where the app is slow, we measure start-up time, how long screens take to open, network request latency and the app's CPU and memory usage. Your IP address is also processed by our provider during these measurements. These measurements do not cover the content of your business data.
- Device context — your device's time zone and app language are stored alongside the notification token, so that we can send your daily due-date summary at your own local time and in your own language. This is not used to determine your location.
- Notification preferences — the on/off settings that say which alerts you want to receive.
- Usage events — aggregated, anonymous counts that tell us which screens and flows are used (for example "invoice created"). Invoice content, product names and customer details are never included in these events.
- Notification token — so we can deliver notifications to your device.
- Subscription status — to determine whether your subscription is active.
2.5 Links you share and team access
- Public document links: If you choose to share an invoice, quote, order or product catalogue, that document is published on a page at
girops.com/d/…that opens without signing in. Only you create the link, you set how long it lasts and you can revoke it at any time. These pages never show purchase prices, costs or stock levels, and they are closed to search engines. Anything your customer leaves on that page (accepting or declining a quote, a question, or the contact details on an order form) is stored as a record of your business. - Team access: If you add employees to a business, they can see that business's data to the extent their role allows. The business owner can prevent employees from seeing costs and purchase prices. Changes made by team members are kept in an audit log.
3. Why we process data
- To provide the service: storing the business data you enter, making it available across your devices and managing your account.
- Security: preventing unauthorised access and detecting abuse.
- Improvement: fixing crashes and understanding which features are useful.
- Subscription: verifying access to premium features.
4. Sharing of data
We do not sell your business data and we do not give it to third parties for marketing. To run the service we use the infrastructure providers below; they process data only on our behalf and on our instructions:
| Provider | Role |
|---|---|
| Google Firebase (Auth, Firestore, Storage, Cloud Messaging, Crashlytics, Analytics, Performance Monitoring) | Authentication, image storage, notifications, crash reporting, usage measurement, app performance measurement |
| Our own self-hosted infrastructure | Application server and database hosting |
| Adapty | Subscription status management |
| Google Play Billing | Purchase transactions |
| Google Maps | Showing the map when picking an address |
| Cloudflare Web Analytics | Anonymous, cookie-free visit statistics for the website (girops.com) |
Apart from these, we share your data with authorities only where we are legally required to do so (a court order or lawful request).
5. Storage and security
- All traffic between the app and the server is encrypted with HTTPS/TLS.
- Session data on your device is stored encrypted, backed by Android's hardware-backed keystore.
- App data is excluded from device backups.
- Your data is kept for as long as your account exists. When you delete your account it is permanently deleted, to the extent described in section 6.
6. Your rights and deleting your account
You have the right to access, correct and delete your data, and to object to its processing. To exercise these rights, write to us at the address above.
You can delete your account and all of your data yourself: how to do it, and exactly what gets deleted, is described on the Account Deletion page.
7. Children's privacy
GiroPS is a business app and is not directed at children under 13. We do not knowingly collect data from children.
8. Changes to this policy
When this policy changes we update this page and the date shown at the top. For significant changes we also notify you from within the app.