Privacy Policy

This policy describes the data collected by Clino — the POS and management application for laundry businesses, including the Android app and the web app — and how that data is used.

Clino is used by laundry business owners and their staff. In that relationship the business owner is the controller of their own customers’ data, and Clino processes it on the owner’s behalf.

1. Data we collect

Account and identity data. Name, email address, and password (stored hashed, never in its original form) for owners and for staff accounts they create. Phone number where provided.

Operational data. Orders, services, rates, work status, and notes you enter; your customers’ details (name, phone number) to the extent you enter them for the purpose of an order.

Transaction and financial data. Payments, deposits, and the bookkeeping journal entries generated by your business activity.

Device data. Device identifier, model, and operating-system version — used for offline synchronisation, for enforcing the device limit of your subscription plan, and for account security.

Technical logs. IP address, access times, and application errors, for security and diagnostics.

What we do NOT collect: we do not collect precise location, we do not access your contacts, photos, or files, and we do not use your data for advertising.

2. Purposes

Data is used to: operate the service (record orders, process payments, produce reports); synchronise data across devices; enforce subscription-plan limits; secure accounts and detect abuse; provide support; and meet legal obligations, including bookkeeping obligations.

We do not sell your data and do not use it for targeted advertising.

3. Storage and security in transit

Data is held on servers we operate. Passwords are stored hashed. Traffic between the applications and the server is encrypted (HTTPS/TLS).

4. Sharing

We do not share your data with third parties for marketing. Data may be processed by the infrastructure providers we use (hosting, database, email delivery) only as far as is necessary to run the service, and they are bound not to use it for any other purpose.

We may disclose data where required by law or by a valid court order.

5. Retention

Your operational and financial data is kept for as long as your account is active.

After an account is deleted, most data is erased within 30 days. However, bookkeeping and financial transaction records may be retained longer where required by Indonesian tax and bookkeeping regulations. Records retained on that basis are no longer used for any operational purpose.

The details are on the Account Deletion page.

6. Your rights

You have the right to: access your data; correct inaccurate data; export your operational and financial data; and request deletion of your account and its data, subject to the exception in §5.

To exercise these rights, contact us at the address in §8.

7. Security

Passwords are hashed. Sessions use revocable tokens. Staff access is limited by role. The number of synchronised devices is capped by plan. No system is perfectly secure; we will notify you of a data breach that affects you.

8. Contact

Questions about this policy, or requests relating to your rights under §6, can be sent to the address on the Contact page.

9. Changes

If this policy changes materially, we will notify users in the application or by email before the change takes effect. The date of the last update appears at the top of this page.