Privacy Policy for TianggeLife

TianggeLife is an app for running a sari-sari store — sales, inventory, and customer credit (utang). It works fully offline and keeps your records on your device.

There is one optional feature that sends information off your phone: listing your store in the public directory at tiangge.life, so shoppers nearby can see what you sell. That feature is off until you turn it on, and this policy is written around that split.

If you do not list your store

Then none of your records leave your phone. The app has no advertising, no crash reporting, and no third-party tracking. You do not need an account to use any part of it. Two things are counted, and only as anonymous tallies: a search you make for other stores — see If you are here to find a store below — and the app’s first launch.

Anonymous download and install counts. When the Android app is opened for the first time, it tells us once, adding one to a daily count of installs for that app version (or of upgrades, if a store was already set up on the phone). Following the download link at tiangge.life/download adds one to a daily count of downloads. Neither count holds a device ID, IP address, account or anything else that could tell one phone from another.

You enter this information yourself and it is saved only in the app’s storage on your phone:

• Store details — your store name and, if you add one, an image of your GCash / Maya / QR Ph payment code.
• Store location — if you choose to save it, the coordinates of your store and any address or landmark you type in.
• Products — name, barcode, cost, selling price, stock levels, and an optional photo.
• Customers — name, optional phone number, optional photo, and an optional credit limit.
• Sales and credit records — amounts, payment types, dates, and any notes you write.
• Expenses — amount, category, date, and any note you write.
• Your PIN — stored only as a salted cryptographic hash, never as the digits themselves.

The app requests the INTERNET permission because it is a standard part of the framework the app is built with, and because listing your store needs it. It is not used to transmit anything else.

If you list your store

Listing is off by default. Turning it on requires signing in with your email address and choosing, product by product, what to show.

What becomes public

Anyone visiting tiangge.life — no account needed — can see the following for a listed store:

• Your store name, and the address or landmark you typed in.
• Your store’s location on a map, at the precision you chose (see Your store’s location below).
• For each product you ticked: its name, unit, selling price, whether it is in stock, and its photo if you added one. A smaller copy of the picture is uploaded and shown beside the product.
• Your store page shows your best-selling items first, worked out from your own sale records on your phone. Only their relative order is used — never a count, a total, or which products are slow movers — and this never leaves your phone for anyone who has not opted into listing.
• When you last published, shown as “updated N ago”.
• Your weekly opening hours, if you have set any — every store gets a plain default schedule automatically, which you can change or turn off per day in Settings.
• Whether the store shows as currently open or closed. This combines two things: your weekly hours above, and a manual switch in Settings you can use to mark the store closed early (for stepping away, a delivery, and so on). The manual switch can only ever make the store show as closed sooner than your hours say — it cannot make it show as open outside them.

What we store that is not public

• Your email address, so you can sign in again and so we can reach you about your listing.
• Sign-in codes, stored only as an unreadable hash and deleted once used or expired.
• A sign-in token for each device, stored only as a hash, so your phone stays signed in. You can sign out at any time, which revokes it.
• Search statistics for your store — per day, how many searches showed your store and how often its page was opened, plus what people within about 2 km searched for that you do or do not carry. Only you, signed in, can see your store’s figures, and a search word appears only once at least two people have used it.

What is never sent, even when you list

These stay on your phone whatever your settings, because the app simply does not include them when it publishes:

• Your customers — names, phone numbers, photos, credit limits.
• All utang and credit records — who owes what, payments, balances, notes.
• Your sales — every transaction and its history.
• Your cost prices and therefore your profit margins.
• Exact stock counts — only “in stock” or “out of stock” is published, never the number.
• Customer photos, your payment QR image, and your PIN. (Photos of products you tick arepublished — see above.)
• Products you did not tick. A product is not published unless you choose it.

Your store’s location

The app asks for location permission only when you tap Use my current location in Settings. It takes a single reading at that moment. The app does not track your location, does not read it in the background, and does not read it while you are using any other part of the app.

That reading stays on your phone. What gets published is a separate pin that you place, and you choose how precise it is:

• Approximate (the default) — the pin is rounded to roughly a 1 km area before it is sent. Shoppers see a circle, not an address, and no directions are offered.
• Exact — the pin is published as you placed it, and shoppers can get directions straight to it.

Many sari-sari stores are in the owner’s home, so choosing “exact” may mean publishing where you live. You can move the pin to a nearby corner or landmark first and still appear in nearby searches. You can change this, or remove your location entirely, at any time.

Camera

The app asks for camera permission only so you can scan barcodes and QR codes — for example, to find a product quickly at checkout. The camera is used only while a scanner screen is open. Scanned images are not saved and are not transmitted. You can decline the permission and still use every part of the app by entering items manually.

Photos you attach to a customer are saved on your device and are never published. A photo attached to a product stays on your device too, but if you tick that product for the public directory a smaller copy is uploaded and shown publicly alongside it. Untick the product, or remove the photo, and it stops being shown.

Backups and sharing

Because your data lives on your phone, the app lets you export a backup file and share a customer statement. These actions happen only when you choose them. When you do, your phone’s normal share screen opens and you pick where the file goes — for example a messaging app, email, or cloud storage.

A backup contains your full records, including customers and utang. Once you send it somewhere, it is governed by the privacy policy of whichever service you chose, not by this one. We never see these files.

Android device backup

Android can include this app’s data in the automatic device backup you have set up with Google. If that is switched on, a copy of your records — including customer names, phone numbers and photos — is stored in your own Google account, and is restored automatically if you reinstall the app or move to a new phone.

This is deliberate: your records exist on your phone, so without it a lost or broken handset would mean losing them permanently.

The backup belongs to you, not to us. It goes to your Google account, never to any server of ours, and we cannot see or retrieve it. It is governed by Google’s privacy policy. You can switch it off at any time in your phone’s Settings, usually under Google › Backup.

Your customer card

Anyone can make a customer card in the app — a QR code that TianggeLife stores recognise, so you do not have to give your name at every store. It is optional and needs no account.

What the card holds

• The name you type, a random ID, and a signing key. All of it is created and kept on your phone. The signing key never leaves it.
• When you show the card, the store’s app reads your name, ID and public key and saves them in that store’s own records, on the store owner’s phone. We do not receive this. What a store records about you beyond that — such as what you owe — is that store’s own record, not ours.
• The QR changes every few seconds, so a screenshot of it stops working after a few minutes.

If you save your card to Google

You can choose Back up with Google so the same card can be restored if you lose or change your phone. Only then do we receive:

• your Google account’s ID and email address (we do not receive your password, contacts or anything else from Google);
• your card’s name, ID and public key.

We use these only to restore your card. They are not shown to stores, and the only thing a store can ask us is whether a public key belongs to a card ID — the answer contains no name or email. Your balances, purchases and phone number are never sent, because the card does not contain them.

You can sign out on a phone at any time from the card screen. To delete the card’s server record, email us at hello@quantumb.it.com from the Google address you used.

If you are here to find a store

You do not need an account to search tiangge.life, and we do not ask you to sign in.

• If you tap Find stores near me, your browser asks your permission and sends your position to us so we can sort results by distance. We use the exact position for that request and do not store it; the only thing kept is the anonymous count described in the next point. Declining still works — you just get results that are not sorted by distance.
• Anonymous search counts. When you search with your position, we add one to a daily tally of that search word for your area, rounded to roughly 1 km, and note which stores appeared in the results. The tally holds no account, device, IP address, exact position or time of day, and no single search can be picked out of it. Words that look like an email address or a phone number are not counted, and tallies older than 90 days are deleted. Opening a store’s page adds one to that store’s daily count of visits.
• Maps are drawn using tiles from OpenStreetMap, so your browser requests those images directly from them and they will see your IP address and the area you are looking at.
• Tapping Get directions opens Google Maps or Waze, which are outside this policy.

Who else is involved

If you list your store, these companies process data on our behalf to make that work. Nobody is given your information for their own purposes, and nothing is ever sold.

• Railway — hosts the database holding listings and accounts.
• Vercel — hosts this website and the service the app talks to, and stores the product photos you publish.
• Resend — sends your sign-in code email.
• Google — if you choose to save your customer card to your Google account, Google signs you in and tells us which account it is.
• OpenStreetMap — provides map images.

Deleting your information

On your phone

Uninstalling TianggeLife removes the app’s stored data from your phone. You can also clear the app’s storage from your phone’s Settings.

If Android’s device backup is switched on, a copy may remain in your Google account after you uninstall, and reinstalling would restore it. To remove that copy as well, delete the app’s backup data from your Google account’s backup settings.

Please export a backup first if you want to keep your records — deleting the app’s data cannot be undone.

Your listing

Turning listing off in Settings and publishing again removes your store from the directory immediately.

To delete your account and everything stored with it — your email address, your listing, and your published products — email us at hello@quantumb.it.com from the address you signed up with, and we will delete it. Uninstalling the app alone does not do this, because your listing lives on our server rather than on your phone.

Children

TianggeLife is a business tool intended for shop owners. It is not directed at children and does not knowingly collect information from anyone, including children.

Changes to this policy

If a future version changes what is collected or published, this policy will be updated before that change is released, and the date at the top will change.

Contact

If you have any questions about this policy, about what is public, or about deleting your information, please contact: hello@quantumb.it.com

TianggeLife — offline sales, inventory, and utang tracking for sari-sari stores. Find a store.