This policy explains how information is processed through the Kresvo Android app, website, support channels, and related cloud services. Kresvo is intended for business users and is not directed to children.
Roles and scope
Kresvo determines how account, security, support, billing-verification, and service-administration information is processed. For customer, supplier, employee, debtor, contact, financial, and transaction records entered into a business workspace, the workspace owner ordinarily decides why the information is used and Kresvo processes it to provide the service. Workspace owners are responsible for providing notices and obtaining any permissions required for information they enter about other people.
Information processed
- Account identity and authentication information, including names, email addresses, phone numbers, verified-email status, sessions, recovery events, roles, employee invitations, and permissions.
- Business and workspace details, employee access, branches or locations, preferences, and configuration.
- Customers, suppliers, contacts, debtors, and other information entered by authorized workspace users.
- Products, variants, stock, sales, returns, expenses, payments, debts, invoices, receipts, reports, and related financial and operational records.
- Images and files selected for product, receipt, document, feedback, or business workflows, plus generated documents.
- Optional camera input for barcode scanning and optional coarse or precise device location when a user asks Kresvo to help complete a business address. Location is not collected continuously.
- Feedback, support correspondence, and screenshots a user chooses to attach.
- Google Play subscription product, order, state, expiry, acknowledgement, and purchase-verification metadata. Kresvo stores a one-way fingerprint rather than a raw purchase token and does not receive full payment-card details from Google Play.
- Web-subscription customer, checkout, invoice, subscription status, billing period, expiry, cancellation, tax-status, and payment-provider reference information. Card and bank credentials are entered with the payment provider and are not stored by Kresvo.
- Bounded device, session, synchronization, security, and reliability diagnostics. Native crash and ANR information may also be provided through Google Play. Kresvo does not use an advertising or behavioral-analytics SDK.
Purposes and legal grounds
Information is used to create and protect accounts; operate, synchronize, and support requested business features; calculate totals and generate documents; enforce tenant, owner, employee, permission, trial, and subscription rules; verify Google Play and web subscription events; prevent duplicate subscriptions, abuse, and fraud; diagnose bounded reliability problems; respond to requests; and comply with applicable obligations. Depending on applicable law and context, processing may rely on a contract, legitimate interests, legal obligations, consent, or the workspace owner's instructions. Kresvo does not sell workspace records.
Device permissions
Camera access is requested for barcode scanning. Location is requested only when the user chooses address assistance. Photo or file selection, printing, and sharing occur only when the user chooses the related workflow. Permissions can be withdrawn in Android settings, although the related feature may stop working.
Service providers and international processing
Kresvo uses providers for cloud database, authentication, storage, server functions and email delivery, including Supabase; Google Play for Android distribution, subscription processing, purchase verification, and platform diagnostics; and Stripe for supported web checkout, billing management, payment methods, tax features, fraud prevention, and subscription events. Stripe may offer accelerated checkout through Link when available. Device operating-system providers may handle printing, sharing, location, camera, or file-selection requests. These providers process only information needed for the relevant service under their terms and safeguards. Information may be processed outside the user's country; safeguards required by applicable law will be used where they apply.
Security
Safeguards include encrypted transport, authenticated sessions, tenant-scoped database controls, role permissions, server-owned billing verification, protected storage, bounded diagnostic payloads, and restricted administrative functions. Users must protect credentials and devices and review employee access. No system can guarantee absolute security.
Retention, account deletion, and complimentary eligibility
Information is retained only as reasonably needed to provide the service and meet security, backup, dispute, accounting, billing, fraud-prevention, and legal obligations. Workspace owners remain responsible for their own required record retention and exports.
Owners can start permanent deletion in the app at More → Account information → Delete account. After the safety countdown and final confirmation, the backend removes the account and workspace data from active systems. If final identity removal is interrupted, Kresvo shows a recovery flow so the prepared deletion can be completed. Users who cannot sign in can follow the public account-deletion instructions.
Limited copies may remain temporarily in protected backups, security logs, deletion or support correspondence, billing/audit evidence, or records that applicable law requires Kresvo to retain. Those copies are not available through the deleted account.
If Kresvo has administratively assigned complimentary access to a verified email, the protected eligibility record is separate from the operational account and workspace. It may remain after account deletion so only the unexpired remainder—or lifetime eligibility—can be recovered when the same email is verified again. Ordinary users cannot enumerate this record. It remains until expiry, administrative revocation, or an approved request to remove it. Removing it prevents future re-registration from restoring that complimentary access. Request removal at privacy@kresvo.com.
Rights and choices
Subject to applicable law, a person may request access, correction, deletion, portability, restriction, or objection, and may withdraw consent. Requests about records entered by a business should ordinarily be sent to that workspace owner. Kresvo may verify identity and may retain or withhold information where applicable law permits or requires it.
Children
Kresvo is intended for business use and is not directed to children. A user must be legally capable of accepting the Terms. Information about a minor should not be entered unless the workspace owner has a lawful and necessary business purpose and has completed every required notice and authorization.
Contact and changes
Privacy and rights requests: privacy@kresvo.com. Product support: support@kresvo.com. Never send a password, one-time code, raw purchase token, payment credential, or unnecessary sensitive information.
This policy may be updated to reflect service, provider, security, or legal changes. Material changes will be communicated where reasonably practicable.
Website forms and email preferences
Website forms disclosure updated 23 September 2026.
Contact and account-deletion forms send the details you provide to Kresvo support through Resend, our email-delivery provider. Account-deletion requests are reviewed for identity and authority; submitting the public form does not delete an account or workspace. Supabase stores limited request references and delivery status. We use limited, one-way fingerprints of the sender address and network address to limit repeated submissions.
Newsletter and browser-launch updates are separate, optional choices. For each choice, we record the email address, agreement wording and version, time, source page, and confirmation or unsubscribe status. A new preference becomes active only after email confirmation. Use the unsubscribe link in the email to turn off that preference. Consent and unsubscribe records help us respect your choices. Contact privacy@kresvo.com for questions or requests about this information.