Privacy Policy

This policy explains which data the Scontrino Digitale app (Android, package com.mobilesafeapps.clemente) processes, where it is stored and to whom it is sent. It is written in accordance with Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003.

1. Who we are

The data controller for the data described in section 4 is Mobile Safe Apps di Maria Cristina Galeota, Via Sandro Pertini 41, 80038 Pomigliano d'Arco (NA), Italy, e-mail mobilesafeapps@gmail.com. The app's technical manager is Giuseppe Romano.

2. In short

• We have no servers and there is no account to create. Your business data, your customers, receipts and invoices stay on your device.
• Data leaves the device only when you choose so: sending documents to the Italian Revenue Agency (Agenzia delle Entrate), backups to your Google Drive, payments with your SumUp account, sharing a document.
• Through Google Firebase we only receive crash reports and, only if you consent, usage statistics. They contain no sales, customers or tax data.
• No advertising: the app does not use the advertising ID.

3. Data you enter in the app (stays on the device)

The app is a point-of-sale tool: you enter the data and the device stores it. We have no access to it.

You, as the merchant, are the data controller for your customers' data: you collect it and decide how to use it. Please process it in compliance with the GDPR, for example by informing your customers and keeping data only for as long as necessary.

Data stays in the app's storage until you delete it or uninstall the app. You can delete customers and products. Receipts and invoices cannot be deleted one by one because of tax retention obligations: they are voided instead. From Settings → Backup & restore → Full reset you can erase all business data from the device, including credentials, e-invoice files and the kiosk pairing. Backups on Google Drive remain in your account: you can delete them from Google Drive → Settings → Manage apps.

Android automatic backup. If Google backup is enabled on the phone, Android may save the app's data to your Google account so you get it back when you change phone. The following are excluded and never leave the device: Fisconline credentials, backup passwords, kiosk PIN, kiosk pairing keys. You can disable backup from the system settings.

4. Data we receive

Only in the versions published on Google Play, through Google Firebase (Google Ireland Ltd.):

• Firebase Crashlytics — crash reports. When the app crashes or hits an error we receive a technical report: device model and operating system, app version, the point in the code where the error occurred, an installation identifier. It is used to fix defects. Legal basis: our legitimate interest in providing a working app (Art. 6(1)(f) GDPR). You can turn them off at any time from Settings → Privacy → Error reports.
• Google Analytics for Firebase — usage statistics, only with your consent. On first launch the app asks whether you want to share usage statistics, for example which screens are opened. They are linked to a random installation identifier, not to your name. Without your consent nothing is collected. You can change your mind at any time from Settings → Privacy. Legal basis: consent (Art. 6(1)(a) GDPR). Advertising, ad personalisation and the advertising ID are always disabled.

In both cases sales, amounts, products, customers, documents and your tax data are not sent. Google processes this data as our data processor. Data may be transferred outside the EU under the safeguards provided by Google (standard contractual clauses). Reports are kept for the period set by Firebase: 90 days for Crashlytics and up to 14 months for Analytics.

5. External services you use through the app

You enable these services yourself, with your own account. Each one processes data according to its own policy, and we receive nothing.

• Agenzia delle Entrate — Documento Commerciale Online. Only if you enable direct submission. The app signs in with your Fisconline credentials and transmits the commercial documents: lines, amounts, VAT, payment method and, if the customer provides it, the lottery code. The connection is direct and encrypted (HTTPS) with the Agency's servers.
• Google Drive. Only if you enable Drive backup. The backup contains the app's archive and the business profile and is saved in a folder reserved for the app in your Drive. If you set a backup password, the file is encrypted before upload (AES-256, key derived from the password with PBKDF2, HMAC integrity check). Fisconline credentials, backup passwords and the kiosk PIN are never included.
• SumUp. Only if you use the integrated payment. Sign-in, card reader pairing and payment take place in SumUp's screens, with your account. The app passes the amount and reference and receives the transaction code. To accept payments SumUp may request the device location.
• Google Play. Manages the subscription and payments. We do not see your payment data.

6. Sharing documents

When you choose to share a receipt, an invoice or a repair, for example via WhatsApp, e-mail, SMS, PDF or PEC for the e-invoice, the document goes to the app you chose and from there to the recipient. The app sends nothing on its own.

7. Local network, printers and kiosks

• Printers and fiscal registers connected via Bluetooth or local network receive the data of the document to print.
• Kiosks, handheld devices and kitchen displays communicate with each other over the venue's network, with an encrypted connection and a pairing code. They only exchange menus, orders, table number and notes, with no personal customer data.

8. Device permissions

9. Security

Fisconline credentials are stored in the system's protected storage. Credentials, passwords and keys are never included in backups. Temporary plaintext copies created during backups and restores are deleted. Connections with the Revenue Agency, Google and SumUp are encrypted. We recommend protecting the device with a screen lock and setting a backup password.

10. Minors

The app is intended for merchants and professionals and is not directed at people under 18.

11. Your rights

For the data in section 4 you can ask us for access, rectification, erasure, restriction, objection and portability, and withdraw your consent to statistics at any time from the app. Write to mobilesafeapps@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

For the data you keep in the app, i.e. that in section 3, you can view, edit, export and delete it directly on the device. We do not have it.

12. Changes

If the way the app processes data changes, we will update this page and the date at the top. Significant changes will also be announced in the app.

This is an English translation provided for convenience. In case of discrepancy the Italian version prevails.