Kobook logoKobook

Privacy Policy for Kobook

Last updated: 6 September 2026

Introduction

Kobook (“the app”, “we”, “us”) is a shop inventory, sales, and business management application for small retail shop owners. This Privacy Policy explains what information the app accesses, how it is used, and the choices you have. It applies to the Kobook mobile application operated by Olowodarey.

The guiding principle of Kobook is that your shop's business data belongs to you and stays with you. The day-to-day records you create (products, sales, stock levels, staff, customer credit, expenses) are stored on your own device and, when you choose, backed up to your own Google Drive — not to us.

Information We Access and Why

1. Google Account information (via Google Sign-In)

When you set up a business account or join a shop as staff, you sign in with Google. We receive, from Google:

  • Your name
  • Your email address
  • Your Google account ID (a stable identifier)

How we use it: solely to create and identify your account — to know which business(es) you own or which shop you are staff at, and to manage your subscription status. We do not use it for advertising and we do not sell it.

2. Google Drive access (drive.file scope)

If you enable backup, the app requests the drive.file permission. This is the most limited Google Drive permission available: it allows the app to see and manage only the files the app itself creates in your Drive. It does not allow the app to see, read, or access any of your other Google Drive files, folders, photos, or documents.

How we use it: to create and update a single backup file of your shop's data inside a folder named “Kobook Backups” in your own Google Drive. This backup exists so that if your device is lost, damaged, or replaced, you can restore your business records. The backup is stored in your Drive, under your Google account, controlled by you. Olowodarey has no access to this backup and cannot read your shop data through it.

3. Business and shop data

The core records you create in the app — products, categories, sales, stock movements, staff members and their PINs, customer credit, supplier credit, damaged stock, returns, expenses, and cash reconciliation — are stored locally on your device in the app's own database. Daily operation works fully offline and does not send this data to us.

Limited account-level information is stored on our servers to run the service: your business name(s), subscription status, and — if you choose to add a staff member's email — that staff member's name and email, so the same person can be recognized across your shops. We do not store your products, sales, inventory, customers, or financial records on our servers.

4. Staff PINs

Staff log in to the app on the shop's device using a numeric PIN. PINs are stored only on the device, in a hashed and salted form — never in plain text, and never transmitted to our servers or to Google.

How Your Information Is Stored and Protected

  • On your device: business data is stored in the app's local database. Your backend login token is stored in your device's encrypted secure storage (Keychain/Keystore).
  • On our servers: account and subscription data is stored on our hosted backend (Railway/PostgreSQL). Access is restricted and protected by authentication.
  • In your Google Drive: backups are stored under your own Google account, protected by Google's security and your Google credentials.

We take reasonable measures to protect information, but no method of electronic storage is completely secure.

Data Sharing

We do not sell, rent, or trade your personal information or your business data. We do not share it with third parties for their own marketing.

The only third parties involved are:

  • Google — for sign-in and, if you enable it, Drive backup, under Google's Privacy Policy.
  • Our hosting provider — which stores the account-level data described above on our behalf.

Your Choices and Rights

  • Backup is optional. You can use the app without ever granting Google Drive access; you simply won't have an automatic cloud backup.
  • You can revoke Google Drive access at any time from your Google Account settings (myaccount.google.com → Security → Third-party access), or by deleting the “Kobook Backups” folder in your Drive.
  • You can request deletion of your account and the account-level data we hold (business name, subscription, staff email identities) by contacting us at olowodarey@gmail.com.
  • Your local data is removed when you uninstall the app or use the app's “clear data” function (this does not delete your Drive backup, which remains under your control).

Google API Services — Limited Use Disclosure

Kobook's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, information obtained through Google Drive (drive.file) is used only to provide and improve the backup feature described above; it is not transferred to others except as necessary to provide that feature, is not used for advertising, and is not read by humans except with your explicit permission or as required for security or legal reasons.

Children's Privacy

Kobook is a business tool intended for use by adults operating a shop. It is not directed at children under 13, and we do not knowingly collect information from them.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.

Contact Us

If you have questions about this Privacy Policy or your data, contact:

Olowodarey
Email: olowodarey@gmail.com