PharmaOSby Zenski · Pharmacy management, simplified

Privacy Policy

Last updated: 6 August 2026

1. About PharmaOS

PharmaOS is a pharmacy-management application for retail pharmacies in Nepal. It is a business tool used by a pharmacy's owner and staff — it is not a consumer health app and it is not used by patients.

The App is available on Android, iOS and on the web at pharmaos-zenski.web.app. A single account can belong to more than one pharmacy, with a role (owner, pharmacist or staff) in each.

What the App does:

• Point of sale — record counter sales, print or share receipts, and take cash, QR, card or credit (udhar) payment.
• Inventory & batches — stock levels per batch, batch numbers, expiry dates, cost and MRP, stock adjustments and stock counts.
• Expiry management — flag expiring and expired stock, quarantine or write it off, and prepare supplier returns.
• Purchases & suppliers — record supplier invoices, payables and payments, supplier schemes and returns.
• Customers & udhar — customer records, credit limits, outstanding balances and payment reminders sent via your own WhatsApp or SMS app.
• Reports — sales, profit, stock valuation, expiry and payables, exportable as PDF or CSV from your device.
• Staff & access — invite staff, assign roles, and keep an audit trail of who did what.

Device permissions

• Camera — only to scan a barcode live. No photo or video is taken, stored or uploaded.
• Notifications — only if you enable them, to deliver the alerts you choose.
• Biometrics (Face ID / fingerprint) — optional app lock. The check is performed by your device; we never receive your biometric data.
• Bluetooth — optional, only to print to a thermal receipt printer you pair yourself.

2. Information we collect

What we do not collect

• Precise or coarse location.
• Your contacts, photos or media library. The camera is used only for live barcode scanning — no images are stored.
• Health data beyond the medicine inventory a pharmacy chooses to record.
• Advertising identifiers or cross-app / cross-site tracking identifiers.

3. Data stored on your device

PharmaOS keeps a copy of some data on the device so the counter keeps working when the internet drops — a real requirement for pharmacies in Nepal.

• Offline cache — your recently loaded medicines, stock, customers and dashboard figures are stored in a local database on the device so they can be viewed offline. It is refreshed from the server whenever you are online.
• Offline queue — a sale, payment, purchase or stock entry you record without a connection is stored on the device and sent automatically once you are back online. Until then it exists only on that device.
• Sign-in credentials — your session token is held in the device's secure keystore (iOS Keychain / Android Keystore), not in ordinary storage.
• Preferences — language, calendar (Bikram Sambat or Gregorian), notification choices and app-lock settings are stored locally on the device.

Signing out or uninstalling the App removes this local data from that device. On the web version the equivalent data is held in your browser's local storage. We do not use advertising or tracking cookies.

4. How we use information

• To provide, operate and secure the App — authentication, storing and syncing your records across devices, generating receipts and reports, and sending notifications you enable.
• To provide customer support and respond to your requests.
• To maintain reliability and security (diagnostics, abuse and fraud prevention).
• To comply with legal obligations.

We do not sell your personal data, and we do not use it for advertising or cross-app tracking.

5. Service providers & sharing

We share data only with service providers that process it on our behalf to run the App, under contract and appropriate safeguards:

• Supabase — hosting, authentication and database.
• Google Firebase — Cloud Messaging (push) and Remote Config.
• Google & Apple — optional "Sign in with Google / Apple".
• Sentry (optional) — crash diagnostics, only if enabled in the build.
• Mixpanel (optional) — product analytics, only if enabled in the build.

We may also disclose information where required by law, or to protect the rights, safety and security of our users and the service.

6. International transfers

Our providers may process and store data on servers located outside your country. Where that happens, the data remains protected by this Policy and by our providers' safeguards, and is encrypted in transit.

7. Data retention

We retain your account and business records for as long as your account is active, and as needed to provide the service and meet legal, accounting and tax obligations. When you close your account or a deletion request is processed, we delete or de-identify the associated data within a reasonable period, except where we are required to retain certain records by law.

8. Deleting your data

What happens to your personal data

When a deletion request is processed, your personal data is always erased or irreversibly anonymised:

• Your name is replaced with "Deleted user"; your phone number and profile picture are erased.
• Your access to every pharmacy is revoked.
• Your push-notification device tokens, notification preferences and read-state are deleted outright.
• Your sign-in is permanently disabled, and your email address is removed from the login record.

If you never created any record that must be retained, your account is hard-deleted entirely.

What is kept, and why

A pharmacy's sales, purchases, ledgers and audit history are financial and regulatory records that record-keeping law requires be retained. Those records belong to the pharmacy, not to your personal account. So if you created any of them, they remain — but attributed to the now-anonymous "Deleted user" rather than to you. Nothing in them identifies you after anonymisation.

This is why deletion is not a one-tap cascade: erasing them would destroy a pharmacy's legally required books and its audit trail.

If you are the pharmacy owner

Deleting your account does not delete the pharmacy. Remaining staff keep working normally. If you were the last active member, the pharmacy's access is suspended and its records are retained rather than destroyed — so the business can be recovered or its books produced if required.

Timing

Requests are reviewed and processed by an administrator, normally within 30 days. We will confirm by email when it is done. You can withdraw a request before it is processed by contacting us.

Deleting a pharmacy's business data

Because the pharmacy — not Zenski — is the controller of its own business records, a request to delete an entire pharmacy's data must come from that pharmacy's owner. Contact us and we will verify ownership before acting.

9. Security

We protect your data with industry-standard measures: encryption in transit (TLS/HTTPS), row-level access controls that isolate each pharmacy's data, credentials stored in the device's secure keystore, and least-privilege server access. No method of storage or transmission is 100% secure, but we work to protect your information and review our practices regularly.

10. Your rights & choices

• Access & correction — most of your data is visible and editable directly in the App; you can also contact us for a copy.
• Deletion — you can request account deletion from within the App (Settings → Account → Delete Account) or by emailing us. We will delete your data in line with Section 5.
• Notifications — you control which notifications you receive in the App's notification preferences, and at your device level.
• Depending on your jurisdiction, you may have additional rights (portability, objection, restriction, or lodging a complaint with a data-protection authority).

11. Children

PharmaOS is a business tool for pharmacies and is not directed to children. We do not knowingly collect personal data from children.

12. Changes to this Policy

We may update this Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide notice within the App. Continued use after an update means you accept the revised Policy.

13. Contact us

Questions or requests about this Policy or your data:
Zenski — info.zenski@gmail.com

Home · Terms & Conditions · Request data deletion