Privacy Policy — IRONOXA POS

IRONOXA LLC · Last updated: 9 November 2026
IRONOXA POS is the phone app for the owner of a shop that uses the IRONOXA POS register, published by IRONOXA LLC. Only the shop's owner login can use it: the shop's own server checks every request and refuses a cashier's or any other staff login.

Who holds your data

The app talks only to your shop's own server, at the address typed on the sign-in screen. There is no other server and no third party. Your shop is the controller of its data. Where IRONOXA LLC hosts that server for your shop, it does so on your shop's behalf.

What is sent

At sign-in the app sends the owner's email and password to your shop's server over HTTPS only. A typed http:// address is changed to https://, so the password never travels unencrypted.

After sign-in, the app reads from your shop's server what the owner asks to see, and sends the changes the owner makes. Your shop's server checks every change and can refuse it.

What the owner sees and can change

  • Sales, orders and refunds, closings and cash counts
  • Card payments: the card brand, the last four digits, the authorization code and how the card was presented, and, when the card terminal gives it, the name on the card. Full card numbers never reach the app.
  • Items, prices and stock
  • Staff and their roles, their sales, their clock-in and clock-out times, and the actions that needed a manager's approval. Staff PINs can be set, but a PIN is never shown back.
  • Promotions and coupons, and reward programmes
  • Customers: name, phone number, email, birthday, customer group, reward points and total spent, and whether they agreed to receive texts or replied STOP

Texts to customers

The owner can send text campaigns to the shop's customers. They are sent by your shop's server, not by the phone, and only to customers the shop has recorded as agreeing to receive texts. A customer who replies STOP stops receiving them.

Camera

The camera is used only to scan barcodes. No picture is saved or sent: only the barcode's number is used, to find the item, or as the barcode of a new item the owner adds.

Face ID and fingerprint

Optional, and only to unlock the app. The check is done by the phone itself (Face ID, Touch ID, a fingerprint, or the phone's passcode), which only tells the app yes or no. Nothing about your face or finger reaches the app or any server.

What is kept on your phone

  • The password, only in the iPhone Keychain or the Android Keystore, so the app can sign back in when the session ends
  • The session issued by your shop's server, while signed in
  • The shop's address and the owner's email
  • The register last chosen, and whether Face ID or fingerprint unlock is on
The shop's sales, orders, customers and other figures are not stored on the phone: they are read from your shop's server each time.

What is not done

No advertising. No tracking, and no data used to track you across apps or websites. No analytics and no crash-reporting tools. No notifications. Data is not sold or shared.

Security

All traffic is HTTPS. On Android, system backups are turned off for this app, so what it keeps is not copied to a backup or to a new phone.

Deleting your data

Signing out deletes the saved password and the session from the phone, and asks your shop's server to end the session. The shop's address and the email are kept, so signing in again needs only the password. The Face ID or fingerprint setting is kept too, and the register last chosen stays until the next sign-in. To be sure the saved password is removed, sign out before deleting the app.

The shop's records themselves live on your shop's server. Only your shop can change or delete them.

Accounts

No accounts are created in the app: logins are made by the shop. To remove a login or its data, the shop's owner deletes the user on the shop's site, or contacts IRONOXA at https://ironoxa.com/contact.

Children

The app is a tool for running a shop and is not directed at children.

Contact

IRONOXA LLC — https://ironoxa.com/contact