INFORMATION & TRUST
Mercadys privacy policy
Your business data stays on your device. How permissions, backups and ads work in Mercadys.
Updated: November 10, 2026
1. Scope and contact
This policy describes Mercadys for iPhone and iPad, NALVETH’s point of sale for small shops and restaurants, formerly Ajolotienda. Mercadys works without creating an account.
Controller: NALVETH, México. For privacy questions and personal data requests, contact support@nalveth.dev. The NALVETH website and other apps are described in the general privacy policy.
2. Your business data
Mercadys lets you manage sales, inventory, the cash register, tables and orders, customers, store credit and balances, purchases and suppliers. The data you enter for these features, including your customers’ details and product photos, is stored on your device.
Mercadys does not automatically send this data to NALVETH servers, does not share it with ad networks and does not use it to select ads. NALVETH has no access to it.
If you record details about your customers (for example, name, phone number or outstanding balance), you decide what to store and you are responsible for handling it in accordance with applicable law. Record only what your business needs.
3. Camera, photos, files and backups
With your permission, Mercadys uses the camera to scan barcodes and take product photos. You can select images from your photo library or save receipts and account statements you choose to keep there. Images are processed on the device.
When you print, share or save a report, receipt or backup, the data it contains goes to the destination you choose (for example, a printer, Files, WhatsApp or email). That service may keep a copy under its own rules. iCloud device backups may include local data depending on your Apple settings.
4. Advertising
Mercadys is free and shows ads through Google AdMob, without additional mediation networks. Ads are never shown while you are selling, taking payment, handling orders or closing the register.
Google’s SDK may process IP addresses, approximate location, device identifiers, ad and interaction data, and performance or diagnostic data to show and measure ads, prevent fraud and improve the service. If you grant iOS tracking permission, Google may use the advertising identifier (IDFA) to show more relevant ads; if you do not, ads are shown without access to that identifier. Read how Google uses data from sites and apps and, when the consent form is shown, see the partner list under “Manage options”.
5. Your choices
In the European Economic Area, the United Kingdom and Switzerland, the consent message lets you accept, decline or manage your advertising choices. Where applicable, you can change or withdraw consent in More → Ad privacy. You can also change tracking permission in iOS Settings → Privacy & Security → Tracking, and camera or Photos access in the app’s settings.
Declining these permissions does not prevent you from using your business features. Without camera access, you can enter products manually.
6. Support
The support form prepares an email in your email app and does not send it directly. If you choose to send it, we receive your address, message and attachments to answer and follow up on your inquiry. Cloudflare Email Routing forwards that email to a Google Gmail inbox; see the Cloudflare and Google privacy policies.
Do not send full backups, your customers’ details or passwords unless we ask for them to solve a specific problem. We keep correspondence for as long as needed to resolve the request and meet applicable obligations.
7. Retention and deletion
Your business data remains on the device until you delete it in the app or delete the app. Before deleting it, create a backup if you want to keep your information: NALVETH has no server copy and cannot recover it. Backups, reports and receipts you have saved or shared must be deleted separately. See how to delete local data.
Retention of advertising data is governed by Google’s practices and the available controls. Deleting the app or withdrawing consent does not automatically delete what it has already received.
8. Requests and rights
Contact support@nalveth.dev to exercise rights of access, correction, cancellation or objection, withdraw consent or request information about data NALVETH has received. We may ask for information needed to verify and handle your request securely. Business data that exists only on your device is managed in the app. Where applicable, you can lodge a complaint with the competent data protection authority.
Mercadys is a business tool and is not directed to children.
9. Providers, transfers and security
Google and our hosting and email providers may process data in countries other than yours, including the United States; their policies explain the applicable safeguards. Protect your device with a passcode and keep your backups somewhere safe. No system offers absolute security.
10. Changes
We will update this policy when Mercadys features, providers or data practices change. The update date appears at the top. If a new purpose requires consent, we will ask for it before enabling it.