Privacy Policy & Permission Declaration

1. Introduction

Zim Reward Cards ("the app", "we", "our") is a mobile application developed and published by Tinosoft, based in Zimbabwe. The app lets you store loyalty and rewards card numbers on your device and display them as scannable barcodes at a point of sale.

This policy explains what information the app handles, what device permissions it requests and why, and how you stay in control of your data. It applies to the Android and iOS versions of the app.

2. Information we collect

We do not collect, transmit, or store any personal information on external servers. The app has no backend, no user accounts, and no remote database.

What you enter

Card details you add — store name, card number, optional nickname, optional notes, category, and colour — are written to local storage on your device only. They are never uploaded anywhere.

What we do not collect

• No name, email address, phone number, or postal address
• No account credentials — there is no account system
• No location data
• No contact list, calendar, or photo library access
• No device identifiers, advertising IDs, or analytics events
• No crash reports or usage telemetry sent to us
• No cookies or tracking pixels

3. Device permissions

The app requests two Android permissions and one iOS usage description. Each is optional in the sense that the app still functions without it, with reduced convenience. Below is exactly what each is used for.

The app also adjusts screen brightness temporarily while a barcode is displayed. This uses the standard Android window brightness attribute and the iOS screen brightness API — it does not require a permission, and your previous brightness setting is restored when you leave the barcode screen.

Permissions the app does not request

• Internet access — the app makes no network requests
• Location (fine or coarse)
• Storage / files / photos
• Contacts, SMS, call log
• Microphone
• Bluetooth or NFC

4. Data storage and deletion

All card data is stored in a local database on your device, in the app's private storage area. Other apps cannot read it. It is included in device backups only if you have Android backup or iCloud backup enabled for this app, in which case the backup is handled entirely by Google or Apple under their respective privacy policies — we have no access to it.

How to delete your data

• Delete one card: open the app, tap the menu on the card, choose Delete.
• Delete everything: uninstall the app. All locally stored data is removed with it.
• Revoke camera access: Android Settings → Apps → Zim Reward Cards → Permissions, or iOS Settings → Zim Reward Cards.

Because we never receive your data, there is nothing for us to delete on your behalf and no deletion request to submit.

5. Third-party components

The app is built with third-party libraries. None of them transmit personal data to us or to third parties.

The app contains no advertising SDKs, no analytics SDKs, and no social login or tracking libraries.

6. Children's privacy

The app is a general-purpose utility and is not directed at children under 13. Because it collects no personal information from anyone, it does not knowingly collect personal information from children. If you believe a child has entered personal information into the app, you can remove it by deleting the relevant card or uninstalling the app.

7. Your rights

Data protection laws, including Zimbabwe's Cyber and Data Protection Act and the EU GDPR where applicable, grant rights such as access, rectification, erasure, and portability. Because the app stores all data locally and we have no access to it, you exercise these rights directly:

• Access and portability: view your cards in the app at any time.
• Rectification: edit any card directly in the app.
• Erasure: delete individual cards or uninstall the app.

There is no server-side copy of your data for us to act on. If you have a question about this, contact us using the details below.

8. Changes to this policy

If a future version of the app introduces features that change how data is handled — for example optional cloud backup — this policy will be updated before that version is released. The "last updated" date at the top of this page will change accordingly, and material changes will be noted in the app's release notes on Google Play and the App Store.

9. Contact

Questions about this policy or the app's data handling can be sent to:

• Developer: Tinosoft
• Website: www.tinosoft.co.zw
• Location: Zimbabwe

10. Permission declaration

This section restates the permission usage in the format requested by app store review teams. It is provided for transparency and applies to the Google Play and Apple App Store builds of Zim Reward Cards.

Camera

Declaration: The camera is used solely to scan the barcode printed on a physical loyalty card, so the user can add that card to the app without typing a long number.

• When it is used: only after the user taps the scan icon inside the "Add card" screen.
• How frames are handled: decoded on-device by the barcode library; frames are never written to storage or sent over a network.
• Core functionality dependency: not required. Manual entry provides the same outcome and the app is fully usable without camera access.
• User-facing rationale string (iOS): "Zim Reward Cards uses the camera to scan the barcode on your physical loyalty card."

Wake lock

Declaration: The wake lock is held only while a barcode is displayed on screen, so the device does not sleep during a scan at the till. It is released as soon as the user leaves the barcode screen.

Screen brightness

Declaration: Display brightness is temporarily raised to maximum while a barcode is shown, because dim screens are the most common cause of failed scans. The user's original brightness setting is restored on exit. No permission is required for this and it can be disabled by the system's own brightness controls.

Network and other permissions

The app declares no internet permission and makes no network requests. It does not request location, storage, contacts, microphone, Bluetooth, or NFC access. Hardware feature declarations for the camera are marked android:required="false", so the app installs on devices without a camera.

11. Google Play data safety summary

The following answers correspond to the Data safety form in Google Play Console.