Privacy Policy

Summary

Your business data — products, inventory, transactions, customers — is stored on your own devices. We do not operate any cloud server: your business data exists only on your own devices, on devices you have allowed to sync with your business, and in the backup files you create. We process only three things outside your devices: subscription status (through Google Play), app crash reports, and anonymous usage statistics. We do not sell data and we do not show ads.

Who we are

Lamnota is developed and operated by an individual developer based in Indonesia. For data-protection purposes, the developer of Lamnota is the controller of the limited data processed outside your devices.

Data that stays on your devices

All operational business data is stored locally, on your host device and on the devices you have allowed to sync with it:

• Product catalog, inventory, prices, and transaction history.
• Customer data and the records you enter.
• App user accounts: name, username, PIN, and role. These accounts are created and stored on your own host device — they are not cloud accounts and are never sent to us.

Device-to-device sync

Your host device acts as the server for your business’s other devices. Other devices sign in using credentials created on the host device, then receive data according to the roles and permissions you set. Sync runs over your local network only — data never crosses the internet, and we operate no cloud server it could pass through.

Data we process outside your devices

• Subscriptions — payments are processed by Google Play Billing. We receive confirmation of your subscription status; we never see or store your card details or payment method.
• Crash reports — if the app malfunctions, a technical report (device model, system version, error trace) is sent via Sentry so we can fix it. These reports contain none of your business data.
• Usage statistics — anonymous usage events (for example which features are opened) are processed via PostHog to help us improve the app. These statistics contain none of your business data.

Usage statistics and crash reports are stored on our processors’ servers (PostHog and Sentry) in the European Union. You can turn off sending both in the app settings.

Website

The lamnota.com website measures visits cookieless by default — nothing is stored in your browser, and unique visitors are counted with a privacy-preserving identifier computed on PostHog’s servers that rotates regularly and builds no lasting profile. When something breaks on the site, a diagnostic error report (the error, the page, and basic browser details) is sent to PostHog so we can fix it. Richer analytics (an anonymous identifier to count repeat visits) runs only with your consent, and you can turn website analytics and error reporting off entirely. Both are processed by PostHog in the European Union and contain none of your business data. Details are in the Cookie Policy.

Backup and restore

Lamnota can create a backup file of your data and settings so you can restore it to another device. Backups are encrypted by default; you can choose to create them unencrypted if you prefer. You keep this file yourself — on your devices, your own storage media, or your personal cloud storage. Backup files are never sent to us. If you distribute a backup file to anyone, that copy is in their hands — distributing it is your decision and your responsibility.

Data sharing

We do not sell your data and do not share it for advertising. The processors we use only receive the data necessary for their function: Google Play (payments), Sentry (crash reports), and PostHog (usage statistics and website analytics).

Security

App access is protected by PIN and biometrics. The on-device database and backup files are encrypted by default — both are under your control in settings. Because core data is local, the physical security of your devices also matters — enable a screen lock and keep backup files somewhere safe.

Your rights

Because your business data is stored locally, you have full control: export, delete, or move it at any time from within the app. For the limited data we process (crash reports and statistics), you have the right to request access or deletion under Indonesian Law No. 27 of 2022 on Personal Data Protection. Note that crash reports and usage statistics are anonymous and not linked to your identity, so we may be unable to single out your records — they are deleted automatically at the end of a limited retention period instead. See also Data & account deletion.

Children

Lamnota is intended for business operators and is not directed at children under 13. We do not knowingly collect data from children.

Changes to this policy

We may update this Policy. Material changes will be announced in the app and on this page before they take effect, and the “last updated” date above always reflects the current version. If your device stays offline, the in-app announcement appears the next time it connects — the version published on this page is the authoritative one.

Contact