The short version
On the Free plan, your sales data stays on your device. Your menu, orders, open tabs, staff list and settings are stored on the terminal itself and are never uploaded to us.
On the Pro plan, your shop's data is also kept in our cloud, so every till and the Boss app see the same thing and nothing is lost with a device. If you run an online store, that includes the names and phone numbers your customers give it. Section 4 lists all of it.
For your account, we hold only what signing in needs — your email address, your display name, and your business and branch names.
If your employer gives you the MyBerniaga Staff app, it holds your staff record and reads your phone's location only at the moment you clock in. Section 5 covers it.
We never sell your data, and we do not use it for advertising.
1. Who we are
MyBerniaga POS ("the app") is developed and operated by SMG Arctic Tech ("we", "us"). This policy explains what happens to information when you use the app.
By creating an account and using MyBerniaga POS, you agree to the handling of information described here.
MyBerniaga Staff is the companion app a shop gives its employees, to clock in and see their roster, leave and pay. It is covered in section 5; the rest of this policy applies to it too.
2. What we collect
We keep the amount of information we hold deliberately small. On every plan, this is what we hold about your account:
| What | Why we need it | Where it lives |
|---|---|---|
| Email address | Identifies your account so you can sign in and reset your password. | Firebase Authentication |
| Password | Protects your account. It is handled by Firebase Authentication and stored only in hashed form — we never see it. | Firebase Authentication |
| Display name | Greets you in the app and labels your account. | Firestore (users) |
| Business and branch name | Groups your terminals under one business and tells them apart. | Firestore (users, businesses) |
| Account role | Marks whether the account owns the business. | Firestore (users) |
| Usage events | Anonymous counts of which screens are opened and which actions are used, so we know what to improve. | Firebase Analytics |
| Crash reports | Diagnostics when the app fails — the error, the device model and OS version — so we can fix it. | Firebase Crashlytics |
| Billing records | If you pay us for Pro, an add-on or hardware: the quotations, invoices and receipts we issue you, with the business details printed on them. | Firestore (visible only to us) |
What we do not collect
- On the Free plan: your menu, prices, orders, receipts, open tabs or sales history
- Your customers' details — except the name and phone number a customer types into your online store (Pro, section 4)
- Payment card numbers — card and e-wallet payments are handled by Fiuu, and we never store card details
- Your device's location, contacts, camera roll, microphone or call data — the Staff app is the one exception, and reads only what section 5 lists
- Your staff members' PINs in any readable form (see below)
- Fingerprints or face data — the Boss app's fingerprint or face unlock is checked by your phone, and never reaches us
3. Data kept on your device
On the Free plan, almost everything the app produces stays on the terminal and is never transmitted to us. That includes:
- Your menu catalog — items, order types, sizes, add-ons, remarks and prices
- Photos you choose for menu items, stored in the app's own folder
- The current cart, open tabs and your full order history
- Your tables, floor plan, areas and landmarks
- Your staff list, their roles and their screen permissions
- Printer setup, theme, service mode and other preferences
Staff PINs. PINs used to unlock the terminal are never stored as digits. Each is put through a one-way cryptographic hash with a unique random salt, so the stored value cannot be turned back into the PIN. On the Free plan they stay on the device. On Pro, the hashes (never the digits) are synced so staff can sign in on any till.
On the Free plan this data lives only on your device, so we cannot recover it for you. If the device is lost, reset, or the app is uninstalled, that data is gone. Keep your own backups of anything you cannot afford to lose.
4. On the Pro plan
Pro adds cloud backup and sync. While a branch is on Pro, its tills copy the shop's data to our cloud on Google Firebase, so that every till, the Boss app and the Boss website see the same thing, and so the data survives a lost or broken device. This is what is stored:
- Your menu and catalog, with the photos you add to it
- Orders, refunds, open tabs, trading days, cash drawer records and daily summaries
- Tables and floor plan, printer and receipt setup, payment methods and other settings
- Your staff list, roles and permissions, and the hashes of their PINs — never the digits
- Stock, recipes and transfers between branches; suppliers, including any bank details you enter for them; purchase orders, supplier payments and photos of supplier invoices
- The devices signed in to each branch
- Online store: the name and phone number each customer gives your store, their orders with you, and any note or block you set on them
- GrabFood: the orders Grab sends us for your shop — items, amounts and Grab's references, with no customer contact details — and the menu we send to Grab for you
- Card and e-wallet payments: the reference and status of each payment from Fiuu
When you add a Boss app, we email a one-time code to the business owner's address to confirm it.
Your online store customers
When you run an online store, you choose to collect your customers' names and phone numbers, and you are responsible for telling them why. We store them for you, use them only to run your store, and never contact your customers ourselves. You can block a number, or delete a customer together with their order history, from the Boss app.
If Pro ends
Your tills keep working with the data that is on them, but changes stop reaching the cloud and the Boss app. What is already in the cloud stays there, so it is waiting if you renew, until you ask us to delete it.
5. The MyBerniaga Staff app
A shop on MyBerniaga can give its employees the Staff app. The shop is your employer and decides what is kept about you; we hold it for them and use it only to run the app. You cannot sign up yourself: your employer creates your login from the Boss app with your email address.
| What | Why | When |
|---|---|---|
| Email address and password | Your login. The password is held by Firebase Authentication as a hash — we never see it. | From when your employer sends your login |
| Your staff record | Name, branch, position, phone number, address and emergency contact, as your employer keeps them. You can update your own contact details in the app. | Kept by your employer |
| Precise location | To check you are at the shop when you clock in or out. Read once, at that moment, and kept on that clock-in record. Never in the background, never tracked. Your employer can turn the check off. | Only while clocking in or out |
| Camera | To scan the shop's clock-in QR code, and to photograph a receipt or medical certificate if you choose to. | Only when you open it |
| Photos you attach | A receipt for a claim, or a medical certificate for sick leave. Seen by your employer with the request. | Only those you pick |
| Attendance, leave, claims and advances | Your clock-ins and breaks, and the requests you send your employer. | As you use the app |
| Pay and bank details | Your payslips, and the bank account your pay goes to. A change of bank account goes to your employer to approve. | Kept by your employer |
| Your phone's name and a device key | So clocking in works only from the phone your employer approved. | From your first clock-in |
The Staff app has no advertising, no analytics and no tracking, and does not read your contacts, microphone or anything on your phone you have not chosen to send.
Deleting your Staff login
In the app, Profile → Delete my login deletes your login straight away and signs the phone out. Your attendance, leave and pay records belong to your employer's business records and stay with them; ask your employer about those, or email us and we will pass your request on.
6. How we use your information
- To run your account — signing you in, keeping you signed in, and letting you reset your password.
- To run Pro — keeping your tills, the Boss app, your online store and your Grab and Fiuu connections in step.
- To keep the app working — diagnosing crashes and fixing bugs.
- To improve the app — understanding, in aggregate, which features are used and which are ignored.
- To answer you — replying when you contact us for support.
We do not use your information for advertising, we do not sell it, and we do not share it with data brokers.
7. Who we share it with
We share information only with the service providers that make the app work, and only to the extent they need it:
- Google Firebase (Google LLC) — provides authentication, the account database, Pro cloud storage, analytics and crash reporting. Their handling of data is governed by the Firebase Privacy and Security documentation and Google's Privacy Policy.
- Grab — if you connect GrabFood, we exchange your menu and your Grab orders with Grab.
- Fiuu — if you take card and e-wallet payments, Fiuu processes them. Card details are handled by Fiuu, never stored by us.
- Hostinger — sends the emails we send you, such as the code for adding a Boss app or a Staff app login.
- Your employer — in the Staff app, everything in section 5 is shared with the shop you work for. Other shops on MyBerniaga cannot see it.
We may also disclose information where we are legally required to — for example in response to a valid order from a court or regulator.
Firebase processes and stores data on Google's servers, which may be located outside Malaysia. Google maintains safeguards for such transfers.
8. How long we keep it
- Account details — for as long as your account exists, and deleted when you ask us to close it.
- Pro shop data — for as long as your account exists, including after Pro ends, and deleted when you ask us to close it.
- Online store customers — until you delete them, or until your account is closed.
- Staff app login — until you delete it in the app or your employer turns it off. Your staff record stays with your employer, for as long as their account exists.
- Billing records — for as long as Malaysian tax law requires us to keep them, currently seven years.
- Crash reports — retained by Firebase Crashlytics for up to 90 days.
- Analytics events — retained by Firebase Analytics for up to 14 months.
- On-device data — kept until you delete it in the app, clear the app's storage, or uninstall the app. This is entirely under your control.
9. Your rights
You may, at any time:
- Access the account information we hold about you.
- Correct it — your display name, business name and branch name are editable in the app.
- Delete your account and the information attached to it.
- Withdraw consent by closing your account and uninstalling the app.
- Complain to us, or to the relevant data protection authority, about how we have handled your information.
To exercise any of these, email smgarctictech@gmail.com from the address on the account.
10. Deleting your data
You can request deletion of your account and its data at any time. The account deletion page sets out exactly what is removed, what may be retained, and how long it takes.
To erase the data held on the terminal itself, uninstall the app or clear its storage in your device settings. That removes your menu, orders and staff list from the device immediately and permanently.
On Pro, closing your account also deletes your shop's data from our cloud, including your online store's customers.
In the Staff app, Profile → Delete my login deletes your login at once (section 5).
11. Security
Account sign-in is handled by Firebase Authentication over encrypted connections, and passwords are stored only as salted hashes. Staff PINs are hashed with a per-user random salt before being written to the device, and on Pro only that hash is synced. Pro data is reachable only by your own business's accounts, and each branch's staff accounts see only their own branch.
No system is perfectly secure. The terminal itself is an important part of your security: keep it locked with a device passcode, set a PIN for the business account before handing the app to staff, and remove staff access when someone leaves.
12. Children
MyBerniaga POS is a business tool and is not directed at children. We do not knowingly collect information from anyone under 13. If you believe a child has given us information, contact us and we will delete it.
13. Changes to this policy
We may update this policy as the app changes. The "last updated" date at the top will always reflect the current version, and material changes will be announced in the app or by email to the address on your account.
14. Contact us
Questions about this policy or about your data:
- Email: smgarctictech@gmail.com
- Developer: SMG Arctic Tech, Malaysia
- App: MyBerniaga POS (
com.smgarctic.myberniagapos)
We aim to answer within 5 business days.