Privacy Policy
Applies to the CannyPos till app (Android) and the CannyPos web console. Last updated 3 September 2026.
Who we are
CannyPos is a point-of-sale system for licensed retailers in South Africa. It is operated by CannyPos ("we", "us"). Retailers that use CannyPos ("shops") are the responsible parties for the customer information they capture; we process that information on their behalf.
What the app collects
- Shop staff accounts: the owner's email address and password (held by our authentication service), and cashier names with a hashed PIN.
- Sales data: products sold, quantities, prices, tenders and the time of sale.
- Loyalty members: when a customer joins a shop's loyalty programme, the shop may record their name, cell number, email address, date of birth and, for age verification, a South African ID number. ID numbers are encrypted at rest and only the masked form is shown in the app.
- Device information: a device identifier, app version and last-seen time for each registered till, used to manage the shop's devices.
- Diagnostics: crash and error reports (via Sentry) containing technical details about the failure. They do not include customer names or ID numbers.
Permissions
- NFC — to read a member's loyalty card. Optional; the app works without NFC hardware.
- Camera — to scan product barcodes. Only active while the scanner is open.
- Internet — to sync with the shop's account.
How information is used
To run the shop's point of sale: record sales, keep stock levels, run the loyalty programme, verify age where the law requires it, and produce the shop's own reports. We do not sell personal information and we do not use it for advertising.
Where it is stored
Data is held on servers we control, with access limited to the shop that captured it and to platform administrators for support. The till keeps a local copy of the shop's data on the device so it can trade offline; that copy is removed when the device is reset.
Retention
Sales records are kept for as long as the shop's account is active and for the period South African tax law requires. A shop can delete a member's profile at any time; their past sales are retained without the profile.
Your rights
Under the Protection of Personal Information Act (POPIA) you may ask what information a shop holds about you, and ask for it to be corrected or deleted. Contact the shop where you registered, or email us at privacy@cannypos.co.za and we will pass the request on.
Children
CannyPos is a business tool for adults. Loyalty membership is limited to customers of legal age for the products a shop sells.
Changes
We will update this page when the policy changes and show the new date at the top.
Contact
CannyPos · privacy@cannypos.co.za