Privacy Policy
1. Who is responsible
Kambal Tingi is a software product operated by Adrean Palafox. Small Levers is the project and builder brand associated with the product. Kambal Pet Supplies is the pilot business whose needs helped shape the product; it is not the software operator identified by this policy. Adrean Palafox is responsible for privacy compliance for Kambal Tingi and is the privacy contact for questions about access, correction, deletion, or complaints. Contact adreanpalafox@gmail.com.
2. Information the app handles
Information stored on your device
Local-first features can store products, prices, stock movements, sales, sale attribution, local family-member profiles, analytics, exports, backups, and selected product images on your device. These records support store operations and remain available when the device is offline.
Optional cloud features
If cloud features are enabled, the app can process your email address, authentication information, store membership, invitations, device registration, products, sales, stock, images, synchronization events, and conflict information through Supabase. Supabase provides configured authentication, database, storage, and synchronization services.
Operational diagnostics
The app uses Sentry for configured, redacted operational diagnostics. The current diagnostic path sends only an allowlisted event type and bounded operational metadata such as app release and build, platform and coarsened operating-system version, affected component, operation category, retry status, connectivity state, queue age or size, and a random diagnostic identifier. The app does not intentionally place customer records, product names, prices, quantities, stock or sales records, authentication tokens, screenshots, or raw exception content into this diagnostic payload. Sentry is configured with default PII, screenshots, session replay, and network-body capture disabled; user, request, and exception objects are removed before delivery, and breadcrumbs are reduced to fixed markers. Kambal Tingi configures diagnostics to minimize personal and business data and does not intentionally send unnecessary sensitive business information. Sentry or another provider may still process technical information as part of delivering its service, so this description does not promise exclusions that cannot be technically guaranteed at the provider level.
3. Why we use information and our processing bases
We use information to provide selling, inventory, analytics, export, backup, store-management, authentication, membership, synchronization, product-image, security, support, correction, and deletion features. For account and service operation, we rely on processing necessary to provide the requested service. For security, diagnostics, fraud prevention, and service reliability, we rely on legitimate interests where applicable. We rely on consent only where a particular processing activity actually asks for and depends on your consent. We process or retain information where necessary to comply with legal obligations. Sales and inventory analytics are calculated locally and are not used for advertising or behavioral tracking.
4. Service providers and international processing
We may use Supabase for authentication, database, storage, and synchronization; Sentry for configured operational diagnostics; and Cloudflare Pages to host these public pages. These providers may process or store information outside the Philippines, depending on their infrastructure and service configuration. They process information under their applicable terms and privacy practices. We do not sell personal information or use store records for unrelated advertising.
5. Retention and deletion
Local records remain on the device until deleted or overwritten. A separate local diagnostic spool may retain redacted events for up to seven days so delivery can be retried; it is separate from business records and may be safely discarded.
An individual account-deletion request concerns the requesting user's account and account-related data, such as the authentication account, profile, membership, and registered devices, subject to verification and information that must be retained for security, fraud prevention, legal compliance, dispute resolution, or legitimate business-record obligations. Deleting one member's account does not automatically delete the shared store's products, stock, sales, images, synchronization events, or other shared business records. Those records remain available to other authorized store members unless they are separately removed through an authorized store operation or a separate shared-store deletion decision. Deleting an entire store and its business records is a separate, authorized operation; the current app does not trigger whole-store deletion from an individual account request.
The current app provides a request path rather than an automatic in-app deletion operation. We aim to process verified requests within 30 calendar days. Sentry records are subject to configured Sentry retention and provider controls. Temporary operational logs and backups may remain for up to 30 days before deletion or anonymization.
Request account deletion or email adreanpalafox@gmail.com.
6. Security and rights
We use reasonable safeguards, but no system is completely secure. Subject to applicable law, you may request access, correction, objection, portability, or erasure/blocking of personal information, and may complain to the Philippine National Privacy Commission.
7. Closed testing, children, and changes
Kambal Tingi is currently pre-release software in closed testing. Features may change, defects or interruptions may occur, and availability may vary. Testers should keep independent records or backups for business-critical information. The app is a business tool and is not directed to children. We may update this policy when the app, services, or legal requirements change.
8. Contact
Privacy contact: adreanpalafox@gmail.com