Privacy Policy

Last updated: 3 August 2026

The short version

Laki is offline-first. Your business records — sales, customers, stock, cash counts — are created and kept on your device, and the whole app works with no account and no internet. You may optionally create an account for cloud backup; if you do, your data is encrypted on your phone before it is uploaded, so we only ever hold ciphertext we cannot read.

1. Who we are

Laki ("the app") is made and provided by an independent developer based in the Philippines, publishing under the name aadan. ("we", "us"). For any privacy question or request, contact aadan.dev@gmail.com — it reaches a person, not a ticket queue.

2. Data you create in the app

Everything you enter — business profile, catalogue, sales, customer names and balances, expenses, stock movements, cash-drawer shifts — is stored in a database on your device. It is not transmitted to us as part of normal use.

Because it sits on your device, it is protected by your device's own security (screen lock, disk encryption). If you lose the device without a backup, we cannot recover the data for you — we never had it.

3. Optional backups you control

Manual export

You can export a profile to an encrypted .tindahan file protected by a passphrase you choose, and share or store it wherever you like. That file and its destination are yours; we are not involved. If you forget the passphrase, the file cannot be recovered.

Optional account and cloud backup

You can use every feature of Laki without an account. If you choose to create one (Profile → Cloud sync & backup), we process:

your email address and password, to sign you in;
authentication metadata such as sign-in timestamps;
any encrypted backup you upload, plus its size and date.

Backups are encrypted on your device before upload. We can see that a backup exists and when it was made; we cannot read what is inside it. An account is also what lets a redeem code unlock a purchase on your device.

If you never sign in, nothing leaves your phone. No account is created for you, and no business data is uploaded.

4. What we do not do

We do not sell or rent your data.
We do not use your business records for advertising or profiling.
We do not read your customers' details — with backup on, the upload is encrypted, so technically we cannot.
We do not require an account. Every feature on your device works without one.

5. Permissions the app asks for, and why

Permission	Why	Optional?
Camera	Scanning barcodes, photographing an item or a payment QR	Yes
Photos / files	Choosing a logo, item photos, a payment QR image; saving and opening backups	Yes
Contacts	Only when you tap "Add from contacts" while creating a person	Yes
Internet	Only if you use the optional account, cloud backup or a redeem code	Yes

Declining any of these leaves the rest of the app fully usable.

6. Service providers

Laki ships with no analytics, no crash reporting and no advertising SDKs. If you never create an account, no third party receives anything.

If you do use the optional account and cloud backup, authentication and encrypted storage are provided by Supabase acting as our processor. The app stores handle your purchase, not your business records.

This website carries one third-party element: a vote badge from App Builders PH, a Filipino app-builder community, on the home page. Loading it tells their server your IP address and browser, the same as visiting any website does. It is sandboxed so it cannot run scripts on this site, it appears nowhere else — not on this page — and it has no connection to the app or to anything in your shop. Nothing else on this site is loaded from anywhere but here.

7. How long we keep things

On-device data stays until you delete it or uninstall the app. Backup files you export live wherever you chose to put them, under your control. If you created an account, its record and any encrypted backup stay until you ask us to delete them — email aadan.dev@gmail.com and we will remove them within 15 days.

8. Your rights

Under the Philippine Data Privacy Act of 2012 (RA 10173) — and comparable laws elsewhere — you have rights to access, correct, export and erase your personal data. Because your records are on your device, you can exercise these yourself today: export them from Backup & restore, and erase them by deleting the profile or uninstalling. If you believe we hold anything about you, write to aadan.dev@gmail.com and we will respond within 15 days.

9. Children

Laki is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18.

10. Your own customers' data

Worth being clear about: when you record a customer's name, phone number and what they owe, you are the one responsible for that information under data-protection law — we only provide the tool. Collect what you actually need, and tell people what you keep if your local rules require it.

11. Changes

If this policy changes materially, we will update the date above and notify you in the app before the change takes effect.

12. Contact

aadan.
Sto Cristo, City of San Jose Del Monte, Bulacan 3023
Philippines
aadan.dev@gmail.com