NIO POS

Privacy policy

Last updated 25 October 2026

NIO POS is point-of-sale software for cafés, restaurants, guesthouses and shops. It is made by Nuvilu ("we", "us"). This policy covers the NIO POS Android app, the NIO POS web app at your-business.niopos.store, and the Manage pages businesses use to run it.

NIO POS is used by businesses, not by the public. The business that uses NIO POS decides what goes into it. For the personal data of its staff and customers, the business is the controller and we process that data for them.

What we collect

• Staff. Name, staff ID, role, which outlets they work at, and clock-in and clock-out times. A PIN is never stored, only a one-way hash of it. A staff card is stored the same way: only a keyed hash of its number, plus the last four characters so it can be told apart.
• Manage logins. Name and username, or the NIO ID account a person signs in with. Passwords are stored only as one-way hashes.
• Sales and the till. What was sold, prices, tax, discounts, voids and refunds. Who rang them up and who approved them. How each sale was paid: cash, card, transfer or room. Shifts and cash counts.
• Card payments. If the business turns it on, the last four digits of the card used. NIO POS never takes, sees or stores a full card number, expiry date or security code. Card payments are taken on the business's own card terminal.
• Customers. If the business uses customer accounts, the account name and number, taken from its accounting system. For a room charge, the room number and guest name, which are checked with the hotel's property management system.
• Guests ordering from a table QR code. Only what they order. No name, phone number or account is asked for.
• Devices. A pairing token for each till, whether a till is the Android app or a browser, and when it was last seen. We also keep the addresses of printers, cash drawers and card readers a business sets up: Bluetooth address, network address, or USB vendor and product number.

What the Android app asks permission for

• Network: to reach the business's NIO POS server.
• Bluetooth: to print to a Bluetooth printer the business has already paired. The app does not use Bluetooth to find your location.
• NFC: to read a staff card's number when it is tapped. Nothing else on the card is read.
• USB: to use a printer, cash drawer or card reader plugged into the tablet.
• Location (Android 11 and older only): Android requires this before an app can use Bluetooth. NIO POS does not read or record location.

What we do not do

• No advertising, and no advertising or tracking SDKs.
• No selling or renting of personal data.
• No collection of contacts, photos, location or anything else on the device beyond what is listed above.

Why we use it

To run the business's point of sale: ring up and print sales, send orders to the kitchen, keep the cash drawer right, approve voids and refunds, record hours, and produce end-of-day reports. When the business connects them, it is also used to post sales to its accounting system and to charge rooms in its hotel system. We use device information to keep tills paired and secure, and to fix faults.

Who it is shared with

• Systems the business connects. NIO Books (accounting), NIO HR (staff), NIO ID (sign-in), and a hotel property management system such as Opera, Mews, Cloudbeds or eZee. Only what each one needs is sent, and only when the business turns it on.
• Our hosting provider. Google Cloud runs the servers and the database.
• The law. When we are legally required to share it.

Where it is kept, and how

Data is stored on Google Cloud servers in India (Mumbai). It is encrypted in transit (HTTPS) and at rest. Each business's data is kept apart from every other's. Access in NIO POS depends on each person's role and outlet.

How long it is kept

For as long as the business uses NIO POS. Sales records are kept for as long as the business needs them for its tax and accounting obligations. When a business closes its account, its data is deleted on request, apart from anything we are legally required to keep.

Your choices and rights

If you work at, or bought from, a business that uses NIO POS, contact that business first: it controls your data. You can also contact us. We will help with access, correction or deletion where the law allows. A business can remove a staff member, a card or a customer account from Manage at any time.

Deleting your NIO POS data

NIO POS accounts are created by the business you work for, not in the app. To have your data deleted:

1. Staff. Ask a manager or the owner of your business to remove you in Manage → People. That ends your access straight away. To have your profile, PIN hash and staff cards erased as well, the business, or you, emails us as below.
2. Businesses. To close a NIO POS account and delete all of its data, email hello@niopos.store from the owner's email address, with the subject "Delete my NIO POS data" and the business's niopos.store address.
3. Anyone else. If your business cannot help, email the same address with your name, the business and what you want deleted. We confirm with the business and reply within 30 days.

What is deleted: staff profiles, PIN and card hashes, Manage logins, device pairings, printer and drawer settings, customer accounts, and for a closed business, its catalogue and settings.

What is kept: sales records, receipts and shift reports a business must keep for tax and accounting. A removed staff member's name stays on the sales they rang up. These are kept for as long as the law where the business operates requires, then deleted. Backups roll over within 30 days.

Children

NIO POS is for businesses. It is not meant for children, and we do not knowingly collect data from them.

Changes

If this policy changes, the new version will be posted here with a new date.

Contact

Nuvilu, Malé, Maldives — hello@niopos.store