BizBook — Privacy Policy

Last updated: 12 October 2026

BizBook ("the app", "we", "us") is a business-management app for invoicing, point of sale, and inventory. It is published by Bery Health and Supplies LLC, a Wyoming limited liability company trading as FieldHealth Africa, of 30 N Gould St Ste N, Sheridan, WY 82801, United States. The LLC is the developer registered on Google Play Console. Our second office is Bery Health & Supplies SARL in Molyko, Buea, Cameroon (NIU M062618814647G).

This policy explains what data the app handles, why, and your choices. Plain language, no surprises.

1. Who we are

• App: BizBook — Invoice, POS & Inventory
• Google Play developer: Bery Health and Supplies LLC, the account registered on Google Play Console, shown on Play as FieldHealth Africa
• Publisher: Bery Health and Supplies LLC (trading as FieldHealth Africa), Wyoming, USA
• Second office: Bery Health & Supplies SARL, Molyko, Buea, Cameroon (NIU M062618814647G)
• Address for correspondence: 30 N Gould St Ste N, Sheridan, WY 82801, United States
• Contact: hello@fieldhealthafrica.org

2. The short version

• BizBook is offline-first. Your business data lives on your device by default.
• We do not sell your data. Products, prices, customers, and invoice lines are not sent to an advertising network.
• The app can show one banner on the home screen of a free account, and only after we enable it. Where Google requires a choice, you are asked first. It is not on the till, and it is not shown during a paid plan or a trial. The ad request does not include shop records, and it asks for a non-personalized ad.
• Cloud features (backup, sync, multi-device, AI) are optional and only run when you create a BizBook account or use an AI feature.
• Crash reporting, usage analytics, and advertising measurement are off until you say yes. Each one can be switched off again.
• You can export or permanently delete all your data from inside the app at any time.

3. Data the app handles

a) Business data you enter. Products, inventory, batches, sales, invoices, estimates, clients, suppliers, expenses, payments, bank and cash balances, and staff records you choose to add. This is your operational data.

b) Account data (only if you create an account). Your email address, and either an encrypted password or a Google sign-in, handled by our authentication provider (Supabase) to sign you in and sync your data. We never store your password in readable form.

• If you sign in with a password, account emails (sign-up verification codes and password-reset codes) are delivered through our email provider (Brevo), which processes your email address solely to deliver those messages.
• If you use "Continue with Google", Google confirms your identity to us and returns your email address and basic profile details. We ask Google for nothing beyond that: no contacts, no calendar, no Drive, no other account data. Google's own privacy policy governs what Google does with the sign-in. You can use a password instead, and you can set a password afterwards so the account is never locked to Google.
• If you are signed in, we also keep how many times the app has asked you to rate it on Google Play, and the date of the last ask. That is a count and a date, nothing else. It stops a reinstall from asking you again, and it is deleted with your account.

c) The user manual, sent to a verified account email. If you create an account and verify the email, we send the BizBook manual to that address. The sign-up screen says so before you continue, including when you use "Continue with Google". This is not the business email printed on your invoices. With the address we store the language you chose, your business type, the app version, and a short installation tag used to limit abuse. No business data is sent with it: no sales, no products, no customers, no figures. News and promotional email are a separate checkbox, and that box starts unticked. We do not sell or rent the address. Delete the account, or email us, to be removed.

d) Voice input (only if you use voice entry). If you use the optional voice-entry feature to dictate a sale or expense, your speech is converted to text using your device's speech-recognition service (which may be provided by Google on Android). We receive only the resulting text, which you review before anything is saved. The microphone is used only while you actively hold the record button.

e) Images you submit to AI features (only if you use them). When you use Scan-to- Inventory or Invoice/Receipt OCR, the photo you take is sent, through our secure backend proxy, to our AI provider (Anthropic) to extract text and product details. Natural- language report questions are sent the same way. Images and queries are used only to return your result; they are not used to train AI models, and they are not kept once the request has been answered.

f) Crash reports (optional, off until you agree). If you accept the first-launch prompt, a crash sends the error, its stack trace, your app version, Android version, device model, and locale to Firebase Crashlytics, a Google service. It never sends a user or business identifier, so a report cannot be tied back to you or your shop, and it never sends screenshots, product names, prices, totals, customer details, or anything from a sale, invoice, or payment. Collection is switched off in the app's manifest and enabled at runtime only after you agree. Turning it off in Settings → App stops it immediately and deletes anything still queued.

g) Usage analytics (optional, off by default). If you turn it on, we record the names of a few setup milestones — opening the app, finishing setup, making a first sale — with the app version and how long the step took. Nothing else. No amounts, no product or customer names, no free text; the table that stores it has no column that could hold them. It goes to our own Supabase project. Those records are not sent to an advertising network unless you also turn on advertising measurement (h).

h) Advertising measurement (optional, off until you turn it on). This switch does nothing unless usage analytics is already on. If you turn it on, we may send the names of app milestones (first open, registration, finished setup, first sale, first invoice, activation, a plan offer being viewed, checkout started, a verified subscription, a review request, and ad revenue), an app instance id, and the Play install referrer to Google and OpenAI so we can measure our own advertising. The referrer says which store listing or campaign led to the install. It is not your shop's books.

With the same switch on, the app's Meta (Facebook) and TikTok components also tell those two companies that the app was installed and opened, that your free trial started, and that you bought a plan or credit pack, with its price and currency. This includes a mobile-money purchase made on our website, once the app sees it. Each is sent once, and a purchase made before you turned the switch on is never sent. Meta and TikTok also receive the Android advertising ID and basic device information with these events, so they can tell which of our ads led to the install. They never receive products, prices of your goods, customers, invoice lines, or sale amounts.

Personalized advertising is a further switch, also off, and it only lets those partners use the measurement events for personalized ads. While it is off, we ask Meta and TikTok to limit their use of the events to measurement. It does not change the banner request in (i). Turning advertising measurement off stops new sharing and clears the campaign identifiers we still hold. A request that has already been sent cannot be recalled.

i) Advertising ID and a home-screen banner. The app includes Google Mobile Ads. The Android advertising ID is used only when a banner is requested, or when advertising measurement (h) is on. One banner can appear on the home screen of a free account. It does not appear on the till, and it does not appear during a paid plan or a trial. We do not show it unless we have enabled it. The request asks Google for a non-personalized ad and does not include products, prices, customers, invoice lines, or sale amounts. Where Google requires a consent form, that form is shown first.

We do not collect contacts, precise location, health or clinical records, or browsing history. BizBook is a business-operations tool, not a health-records system.

Device permissions the app may request, and why:

• Camera — scanning product barcodes and QR attendance codes (processed on-device, nothing uploaded), and photographing products or supplier invoices for the optional AI features (uploaded only when you confirm).
• Microphone — optional voice entry only (see d). Never recorded in the background.
• Bluetooth / Nearby devices — connecting to a Bluetooth receipt printer you choose. Receipt data goes only to that printer; nothing else is discovered or contacted.
• Notifications — local reminders you configure (low stock, expiring batches, invoice due dates). Generated on-device.

Every permission is optional: denying it disables only the matching feature.

4. Why we use it

5. Where your data is stored, and how it is protected

• On your device — always. The database is held in BizBook's private application storage, which Android keeps separate from other apps. It is not encrypted at rest, so somebody holding the unlocked handset could in principle read the file. Set a device screen lock, and use BizBook's own PIN or biometric lock (Settings → Security) to add a second barrier. We would rather say this plainly than imply a protection the app does not yet provide.
• In the cloud (Supabase) — only when you sign in and sync. Data in transit is encrypted (HTTPS/TLS), and access is protected by per-account row-level security, so one account can never read another's records.
• AI provider (Anthropic) — receives only the specific image or question for a single request, through our proxy, and does not retain it for training.

6. Payments

BizBook never sees your card number or your mobile-money PIN. We do not build or operate a payment system; licensed processors handle the money.

• Mobile money (Cameroon and the wider CEMAC region). Subscriptions and credit packs are bought on our website at fieldhealthafrica.org/bizbook, where CamPay processes MTN and Orange Money payments. CamPay receives the mobile-money number and confirms the payment to us; we record only that a payment succeeded and what it entitles you to.
• Google Play Billing. Where in-app purchasing is enabled, subscriptions and credit packs bought inside the app are handled by Google, which takes the payment, runs the renewal, and processes any refund. Google tells us only that a purchase was made and gives us a token we check against Google's servers to confirm it. We never receive your card details, and Google's own privacy policy governs them. A Play subscription is managed and cancelled in the Google Play app, not in BizBook.

Whichever route applies, the app stores only your plan and your remaining AI credits.

7. Sharing

We share data only with the service providers needed to run the features you use:

• Supabase — cloud authentication, database, and storage (only if you create an account), and the store for the manual-email list and opt-in analytics.
• Google — sign-in, if you choose "Continue with Google" (b); crash reporting through Firebase Crashlytics, if you agree to it (f); payment processing where Play Billing is used (section 6); and, if you turn on advertising measurement (h) or we show the home-screen banner (i), Google Ads, AdMob, and Firebase Analytics for that measurement.
• OpenAI — milestone names and campaign identifiers, only if you turn on advertising measurement (h). Not your shop records, and not the photos sent to Anthropic.
• Meta (Facebook) — install and app-open events, trial start, and plan or pack purchases with price and currency, with the advertising ID, only if you turn on advertising measurement (h). Not your shop records.
• TikTok — the same events as Meta, under the same switch (h). Not your shop records.
• Brevo — delivery of account emails and the user manual to your email address.
• Anthropic — AI text and vision processing, only when you use an AI feature.
• CamPay — mobile-money payment processing for purchases made on our website.
• Your device's speech-recognition service — voice-to-text conversion, only when you use voice entry.

We do not sell your data or share it with data brokers. Shop records are not sent to advertisers. Advertising measurement is sent only after you turn that switch on.

8. Your choices and rights

• Stay local: use BizBook entirely offline without an account. Your data never leaves your device.
• Export and back up: Settings → Export Data (CSV), and Settings → Backup & Sync for a complete one-tap backup (a ZIP of every table) you can keep anywhere. Free on every plan, because your records should never be trapped inside our app.
• Delete: Settings → Delete Account permanently removes all local data and signs you out. If you are signed in, it also asks our server to delete your cloud account: the account and all its cloud data are deleted 90 days later, and signing back in before then cancels the request. The local deletion cannot be undone. If you no longer have the app, request deletion at hnzozone91.github.io/bizbook-legal/delete-account.html.
• Withdraw consent: Settings → App turns crash reporting, analytics, advertising measurement, and personalized advertising off again. New collection stops immediately. A measurement event already sent to Google, OpenAI, Meta or TikTok cannot be recalled.
• Skip AI: every AI feature is optional and has a manual alternative.
• Leave the manual mailing list: delete the account, or email us and we will delete the address. Promotional email stops when you untick that box.

9. Data retention

Local data is kept until you delete it or uninstall the app. Cloud data is kept while your account is active, and deleted 90 days after you ask to delete your account. Signing in again during those 90 days cancels the deletion. The manual-list address and the campaign-measurement events tied to the account are deleted with it. An event already delivered to Google, OpenAI, Meta or TikTok cannot be recalled. Deleting the account does not cancel a Google Play subscription. Cancel that in the Play Store.

10. Children

BizBook is intended for business owners and staff. It is not directed to children and we do not knowingly collect data from children.

11. Changes and contact

We may update this policy; material changes will be reflected by the "Last updated" date above and, where appropriate, noted in the app.

In September 2026 BizBook moved to the FieldHealth Africa organisation developer account on Google Play, which is registered to Bery Health and Supplies LLC. The company responsible for your data did not change.

In October 2026 the user manual is sent to a verified account email, and the app can measure advertising and show one home-screen banner on a free account. Both stay off until you allow measurement, and the banner also stays off until we enable it. Shop records are not part of either.

Questions or data requests: hello@fieldhealthafrica.org.

Bery Health and Supplies LLC (trading as FieldHealth Africa) 30 N Gould St Ste N, Sheridan, WY 82801, United States Second office: Bery Health & Supplies SARL, Molyko, Buea, Cameroon (NIU M062618814647G)