Managant-privacy

Privacy Policy for Managant

Last updated: September 30, 2026

Managant (“we”, “us”, or “our”) is a mobile application that helps small businesses act as their own manager and accountant — organizing inventory, recording sales, and tracking revenue, costs, and profit. A business can be run by its owner alone or shared with staff members, each with their own account and permissions. This Privacy Policy explains what information the app collects, how it is used, and the choices you have.

By creating an account or using Managant, you agree to the practices described in this policy.

1. Information We Collect

1.1 Account Information

When you register and use your account, we collect:

First and last name
Email address
Country
Date of birth (optional — you may leave it blank)
Password (stored only in an encrypted/hashed form — we never store it in plain text)

Managant no longer collects a phone number. Accounts are identified by email address only.

1.2 Verification Information

To secure your account, we process one-time verification codes (OTP) sent to your email address, for example when you reset a forgotten password.

1.3 Business Information

Information about the business you create or join, including the business name and your membership in it.

1.4 Business and Inventory Data

Content you create inside the app, including:

Product categories
Products, quantities, and stock levels
Sale prices and cost prices
Product barcode numbers (see §1.8)

1.5 Sales and Financial Data

Information generated as you operate your business in the app, including:

Sales transactions and carts (active and completed)
Other recorded costs and overhead expenses (for example rent or supplies)
Daily and monthly revenue, cost, capital, and profit figures
History and statistics derived from your activity

1.6 Staff, Roles, and Invitations

A business owner can invite other people to work in the same business. In connection with this we process:

The email address you enter when sending an invitation, and the role and permissions you assign to it
The name and email address of each member of a business, shown to the owner and to members permitted to manage staff
The role, permission set, and membership status (active or suspended) of each member
The status of invitations you send or receive (pending, accepted, declined, revoked, or expired)
Notifications generated by these events (for example “you have been invited to join a business”), including the business name and the name of the person who invited you

Please note: when you invite someone, you are providing us with their email address — please only invite people who expect to hear from you. When you accept an invitation, your name and email address become visible to the owner of that business and to members who can manage staff.

1.7 What Other Members Can See

A business is shared workspace. Inventory, sales, and financial records created inside a business are visible to the business owner and to other members according to the permissions granted to them — for example, a member may be allowed to view products but not cost prices and profit, or to record sales but not view the shop’s finances. Permissions are enforced on our servers, not only in the app. Your account credentials, your date of birth, and your personal account settings are never shown to other members.

1.8 Camera and Barcode Scanning

Managant can use your device’s camera to scan product barcodes. This is optional — you can always type a barcode in by hand, and the app remains usable if you decline the camera permission or your device has no camera.

The camera preview is analyzed entirely on your device (using Google ML Kit on Android and Apple’s on-device scanning on iOS).
We do not capture, store, upload, or transmit any photos or video. Only the decoded barcode number (for example a 13-digit EAN) is sent to our servers, and only in order to look up whether a product with that barcode already exists in your business.
The app does not request access to your photo library.

1.9 Subscriptions and Purchases

Managant may offer a paid subscription for a business, sold through the Apple App Store and Google Play. This feature is not enabled for all accounts; where it is not enabled, no purchase or store data is processed at all and no connection to the stores is made.

Where subscriptions are enabled and an owner subscribes:

Payment is processed entirely by Apple or Google. We never receive or store your card number, bank details, or billing address.
From the store’s purchase confirmation we receive and store a purchase identifier (the Google Play purchase token or the Apple App Store transaction identifier), the product and plan purchased, and, from the store’s own server notifications, the subscription status, renewal date, and whether auto-renewal is on. We use these only to determine whether a business is entitled to the paid features, and to restore an existing subscription on a new device.
Subscriptions are purchased by the business owner. Staff members are shown only whether the business is subscribed — never the plan, the store, the renewal date, or any other billing detail.
Managing, cancelling, or requesting a refund for a subscription is done through your Apple or Google account settings, under their terms and privacy policies.

Managant lets you create an account or sign in using Sign in with Apple or Sign in with Google. When you choose one of these options, the provider authenticates you and shares a limited set of profile information with us:

Sign in with Apple: your name and email address, together with a unique Apple user identifier. If you choose Apple’s Hide My Email feature, Apple provides an anonymized private-relay email address instead of your real one, and we use that relay address to communicate with you.
Sign in with Google: your name, email address, and a unique Google account identifier.

We use this information only to create and secure your account. We do not receive your Apple or Google password, and we do not access any other data in your Apple or Google account. Your use of Sign in with Apple and Sign in with Google is also governed by Apple’s and Google’s own privacy policies.

1.11 Push Notifications and Technical Information

Basic technical data required to operate the service:

Authentication tokens used to keep you signed in.
A push notification token for your device, together with the platform (Android or iOS), registered when you sign in so we can notify you about things like staff invitations and account activity. The token is removed from your device and deregistered from our servers when you sign out. On Android, push delivery uses Google Firebase Cloud Messaging; on iOS, the Apple Push Notification service. You can turn notifications off at any time in your device settings.

1.12 Crash and Diagnostic Data

To find and fix crashes, we use Firebase Crashlytics (a Google service). When the app crashes or hits a serious error, a report is sent containing:

The error type and the stack trace that produced it
Your device model, operating system version, device language, and available memory and storage at the time
The app version and build, and whether the app was in the foreground
A random installation identifier generated by Crashlytics, which lets us tell one device’s repeated crashes apart without identifying you
A short technical log of the steps leading up to the crash (for example “products screen opened”, “scanner opened”)

Crash reports are not designed to carry your content: we do not put your products, prices, figures, sales records, or the contents of your account into them. Because a crash report is a snapshot of the app’s internal state, we cannot guarantee that a fragment of such data never appears in one, and we treat every report as confidential.

1.13 Usage Analytics

We use Google Analytics for Firebase to understand how the app is used in aggregate, so we can see which features people rely on and where they get stuck. This records events such as which screens are opened, which features are used (for example that a barcode scan was started or a product was created), how often and how long the app is used, and whether an action succeeded or failed — together with your app version, device model, operating system, device language, approximate region (derived from your IP address, which is not stored by us for this purpose), and a random app-instance identifier generated by the SDK.

What analytics does not include:

Your business content — product names, prices, quantities, sales records, revenue, cost, or profit figures are never sent as analytics data. We record that a product was created, not what the product was.
Your name, email address, password, or the contents of your account.
Advertising identifiers. We do not enable Google Signals or advertising-personalization features, we do not build advertising profiles, we do not use analytics data for advertising, and we do not sell it.

Google processes this data on our behalf as a service provider, under Google’s own terms and privacy policy, and we configure it with the shortest practical data-retention period.

2. How We Use Your Information

We use the information we collect to:

Create and manage your account
Authenticate you and keep your session secure, including when you sign in with Apple or Google
Provide core features: inventory management, barcode scanning, sales recording, history, and statistics
Calculate and display your revenue, costs, capital, and profit
Let a business owner invite staff and enforce what each member is permitted to see and do
Send you notifications about invitations and account activity
Determine and restore subscription entitlements where subscriptions are enabled
Communicate essential information about your account (for example, verification codes)
Diagnose crashes and errors, and understand in aggregate which features are used, so we can fix problems and improve the app
Maintain, secure, and improve the app

We do not use your data for third-party advertising, and we do not sell your personal information.

3. How Your Information Is Stored and Protected

We take the security of your data seriously:

Sensitive data stored on your device is encrypted using AES-256 encryption, with encryption keys protected by the device’s secure hardware (Android Keystore / iOS Keychain).
Communication between the app and our servers occurs over encrypted HTTPS connections.
Passwords are never stored in plain text.
Permissions within a shared business are enforced on our servers, so what a staff member can see does not depend on the app alone.

While we use industry-standard measures to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We do not sell or rent your personal information. We may share data only in the following limited circumstances:

Other members of your business: as described in §1.6 and §1.7, according to the roles and permissions set by the business owner.
Service providers / infrastructure: with hosting and backend providers that operate the service on our behalf, under appropriate confidentiality obligations.
Authentication providers: when you choose to sign in with Apple or Google, we exchange the information needed to verify your identity with the respective provider.
App stores and payment processing: where subscriptions are enabled, Apple and Google process your payment and send us the subscription status of your purchase.
Push notification providers: Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service) deliver notifications to your device.
Crash reporting and analytics: Google (Firebase Crashlytics and Google Analytics for Firebase) receives the diagnostic and usage data described in §1.12 and §1.13, acting as a processor on our behalf.
Legal requirements: when required to comply with applicable law, regulation, legal process, or enforceable governmental request.
Protection of rights: to protect the rights, property, or safety of Managant, our users, or the public.

Apple and Google act as independent controllers of the data you share with them, subject to their own privacy policies.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you the service. When you delete your account, we delete or anonymize your personal data, except where we are required to retain certain information to comply with legal obligations — for example, records of subscription transactions.

Crash reports and analytics data are kept only for as long as they are useful for diagnosing and improving the app, and are retained for a shorter period than your account data. They are not linked to your account and are not deleted in response to an account deletion, because they cannot be traced back to you.

Business records — products, sales, and financial history — belong to the business rather than to an individual member. If you leave a business or your membership is removed, the records created inside that business remain available to the business and its owner.

6. Your Rights and Choices

Depending on your location, you may have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Delete your account and associated personal data
Withdraw consent where processing is based on consent

Account deletion: You can delete your account directly from within the app via Profile → Settings → Delete account. You may also contact us using the details below to exercise any of these rights.

Permissions you control on your device: camera access (for barcode scanning) and notifications are both optional and can be granted or revoked at any time in your device settings.

Crash reporting and analytics: you can object to this collection by contacting us at the address below.

7. Children’s Privacy

Managant is intended for business owners and their staff, and is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

8. International Users

Your information may be processed and stored in countries other than your own. By using the app, you consent to the transfer of your information to these locations, which may have data protection rules different from those in your country.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Significant changes may be communicated through the app. Your continued use of Managant after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Email: admin@alassidi.com