Every person who uses Tuskit has one permanent account identity, whether they sign in with a password or with Google. That identity determines who you are; it never determines what you can see. What you can access in a given shop is controlled separately, by your membership and role in that shop -- not by your email address.

Account and authentication data: your email address; if you sign in with Google, the name, email address, and profile photo Google shares with us to confirm who you are. We use this only to authenticate you and link you to your existing Tuskit identity -- we never post to your Google account or read other Google data.

Business data you or your team enter: your shop's profile (name, address, GSTIN, UPI ID), customer and supplier contact details, catalog items, quotations, orders, invoices, payments, and staff memberships.

Device and diagnostic data: app version, device model, and sync status -- never your business data -- if you choose to share it with support, or automatically if you opt in to crash reporting.

We use Resend, a transactional email provider, to deliver account and business email: password resets, staff invitations, security notifications, payment reminders, statements, and invoices you choose to send. These messages carry only what's needed to deliver them (recipient address, subject, content); Resend does not use this data for its own purposes. You can opt out of non-essential reminder email at any time from your shop's notification settings.

The Android app stores your data on your device first and works fully offline; when your shop is connected, the same data syncs to Tuskit's Supabase-hosted backend, where database-level access rules isolate every shop's data from every other shop. The web app reads and writes directly to that same backend.

If crash reporting is enabled for your build, error details (not your business data) may be sent to Sentry, a crash-reporting service, solely to help fix bugs.

• We do not sell your data or your customers' data to anyone.
• We do not show ads or use advertising trackers.
• We do not read your contacts, photos, or files beyond an attachment you explicitly add to an order or document.
• We never infer who owns or belongs to a shop from an email address alone -- membership records determine that.

We share data only with the processors that run the service on our behalf: Supabase (database, authentication), Resend (transactional email), and Google (sign-in, if you choose to use it). We do not sell or rent your data to advertisers or data brokers.

You can download a copy of your shop's data at any time from the app. Uninstalling the app removes everything stored only on your device.

You can delete your Tuskit account yourself, without contacting support: in the Android app under Settings › Delete account, or on the web at tuskit.app/delete-account — that page works even if you do not have the app installed. Deleting your account erases your name, email address, phone number, password and any linked Google sign-in, after a 30-day grace period during which you can still cancel.

Your shop's invoices, receipts and payments are statutory records a business is required to keep, so if your shop continues without you they are retained in anonymised form — amounts, dates and invoice numbers survive, but they no longer identify you. If you are the only member of your shop and you confirm it, the shop and its data are deleted along with your account.

Tuskit is a business tool and is not directed at, or knowingly used by, children.

If we make a material change to this policy, we'll update the date above and, where appropriate, notify shop owners directly.

Questions about this policy: support@tuskit.app.