Bumko privacy policy

1. Who we are

Bumko is an application developed and published by ImagoStack (“we”), operating from Argentina. For any privacy enquiry you can write to us at support@imagostack.com.

2. What data the application handles

The app handles only the information you enter so that it can work. In detail:

• Name, email address and profile photo. Provided by Google when you sign in. They identify each person within their bar's team and record who made each sale. It is stored on our servers.
• Business data. Products with their cost, price and stock; sales with their date, the price charged and, for giveaways, the reason and who it went to (if given); and events with their starting cash and till count. The bar's team enters them so the app can work. It is stored on our servers.
• Team and permissions. Which bar each person belongs to, their role (administrator or staff), whether they are enabled and the requests to join a bar. It is stored on our servers.

We do not use that data to show advertising, we do not sell it or share it with third parties beyond the providers listed in section 5, and we do not build user profiles or track you across apps.

3. Where your data is stored

Some information is processed on our own servers or on those of infrastructure providers contracted by ImagoStack, with security measures appropriate to the type of data.

Bumko is a teamwork tool: so that several people can sell at the same time from the same stock, the bar's data is stored in Google Firebase rather than on the phone. Each bar is a closed account: only the people on its team can see its data, according to their role —staff record sales and the administrator sees everything, including the reports and who recorded each sale— and nobody from another bar can see it.

If you back up your phone, the operating system may include the app's data in that backup. That backup is managed by Google or by your device manufacturer under their own policies, not by ImagoStack.

For how long. We keep the information for as long as it is needed to provide the service. When it is no longer needed, or if you ask us to delete it, we erase it —unless a legal obligation requires us to retain some data for a set period, and only for that period.

4. Permissions the app requests

We only ask for strictly necessary permissions, and we always explain what for:

• Cámara (android.permission.CAMERA). It is only used to read the QR code a bar's administrator shows you when you want to ask to join their team. The image is never stored or sent anywhere.

5. Sharing information with third parties

So that some features can exist, the app uses the following third-party services, which may process data under their own policies:

• Google Firebase (Authentication y Cloud Firestore). To sign in and store the bar's data so the team can share it in real time. See their privacy policy.
• Google Sign-In. To sign in with your Google account. Google shares your name, email and profile photo with us, and nothing else. See their privacy policy.

We may disclose information only where a competent authority requires it through a valid legal order.

The providers named above may process that information on servers located outside your country, under the safeguards set out in their own policies and in the legal frameworks that apply to them.

Under no circumstances do we make automated decisions that affect you, nor do we build user profiles.

6. Content you share yourself

If you use a feature of the app to share content (for example, sending an image or a summary by messaging), that sending is done by you through the application you choose. ImagoStack does not take part in that content and keeps no copy of it.

7. Minors

Bumko is not directed at children under 13 and does not knowingly collect data from minors. Because of the type of content, we recommend it for ages 18 and over. If you believe a minor has given us information, write to support@imagostack.com and we will delete it.

8. How to delete your data

You can request the deletion of your data by writing to support@imagostack.com. We process the request within 30 days.

More details on the data deletion page.

9. Your rights

Under the regulations that apply to you —the GDPR if you are in the European Union, the LGPD in Brazil, Personal Data Protection Law 25.326 in Argentina, or whichever governs in your country— you have the right to access your data, rectify it, erase it, restrict it or object to its processing. Write to us to exercise them.

Legal basis. We process the information in order to provide the service you request and, depending on the case, on the basis of your consent or of our legitimate interest in keeping the application running and preventing abuse.

If you believe we did not handle a request properly, you have the right to lodge a complaint with the supervisory authority of your country of residence: for example, the Garante per la protezione dei dati personali in Italy, the Spanish Data Protection Agency in Spain, the National Data Protection Authority in Brazil, or the Agency for Access to Public Information in Argentina.

10. Security

We apply reasonable technical measures to protect information, including the use of the operating system's private storage. No method is infallible, but we minimise the risk with the simplest strategy: not accumulating data we don't need.

11. Changes to this policy

If we update this policy, we publish the new version at this same address and change the date in the header. If the change is significant, we announce it inside the app.

12. Contact

ImagoStack — Argentina. Support and privacy: support@imagostack.com.