Sellby Keyboard Privacy Policy
In short: what you type is processed only on your phone. Sellby has no server that receives your keystrokes, customers, orders, products or bank details. All of that stays on your phone and is not sent anywhere by us.
1. Who we are
Sellby Keyboard is an Android keyboard for online sellers, developed by the owner of the Sellby project ("we"). Privacy contact: x.employstudio@gmail.com.
2. Data processed and where it is kept
| Data | Purpose | Where |
|---|---|---|
| Text you type with the keyboard | Entering text into the app you are using | Processed on the phone only; not stored by us and not sent anywhere |
| Customers, orders, products and order statuses you enter | Building invoices, status messages and the dashboard summary | The app's storage on your phone |
| Payment methods (bank/e-wallet name, account number) and QRIS photos you add | Placed into the invoice text you send | The app's storage on your phone |
| Store profile (name, address, phone), message templates, Auto-Text, keyboard settings | Filling in invoices and quick replies | The app's storage on your phone |
| A table copied from a spreadsheet app (e.g. Excel, Google Sheets) | Turned into plain text by the keyboard so it can be pasted into any app. It is not recorded or sent anywhere; clips the source app marks as sensitive are left alone | Stays on your phone's clipboard |
| One contact you pick (name and phone number) | Filling in the buyer on an invoice | Read when you pick it; stored locally only if you save the customer/order |
| Trial start time and premium purchase status | Deciding which features are unlocked | The app's storage on your phone; the trial start time is also kept in Google Play services' Block Store (see section 5) |
3. What we do not do
- We do not record, transmit or sell what you type.
- We use no analytics SDK. Sellby shows no ads anywhere, and the keyboard never loads an ad SDK.
- We do not create user accounts or ask for your name, email or phone number to use the app.
- We operate no server that stores your store's data.
4. Permissions the app requests
- Contacts (
READ_CONTACTS): requested once, the first time you tap the contact button in the Invoice panel, so contact picking behaves the same on every phone brand. The app only reads the contact you tap in the list. Denying the permission does not stop you from entering buyer details by hand. - Nearby devices / Bluetooth (
BLUETOOTH_CONNECT;BLUETOOTHon Android 11 and older): requested once, the first time you choose a printer in Settings > Cetak > Printer (Android 12 and newer also ask forBLUETOOTH_SCAN, declared as not used to find your location). Used only to look for printers near your phone, pair with the one you choose, and send a receipt or shipping slip (Struk Pembayaran / Slip Pengiriman) to it. Sellby does not use this to find your location, does not keep the list of devices it sees, and does not send what is printed anywhere else. - Microphone (
RECORD_AUDIO): requested once, the first time you hold the mic button in the Product form (Name and Description). Sound is recorded only while you hold the button and is turned into text by your phone's own speech recognition service (usually Google's), which may send the recording to its servers. Sellby itself keeps neither the recording nor the result beyond the text that lands in the field. Refusing the permission does not stop you from typing. - Vibrate: for key vibration.
- Internet and network state: declared by the Google Play Billing and Meta SDK libraries (see section 5). The keyboard does not use them to send what you type.
- Advertising ID (
AD_ID, and the Android Privacy Sandbox ad permissionsACCESS_ADSERVICES_*): declared by the Meta SDK for counting installs that come from Meta ads.
5. Google services used
The app uses Google services that are governed by Google's privacy policy (policies.google.com/privacy):
- Google Play Billing: the one-time premium purchase is handled entirely by Google Play. We do not receive your card number or payment details; the app only learns the purchase status. The library may send usage logs to Google, outside our control.
- Meta (Meta ads): to count how many Sellby installs come from Meta (Facebook/Instagram) ads, the companion app loads the Meta SDK when it is opened. The SDK never runs from the keyboard and never receives what you type, your clipboard, or your customers, orders, products or bank details. Meta receives basic app events (for example that the app was installed and opened), the device's advertising ID, IP address (approximate location) and device information; see Meta's data policy. You can reset or delete the advertising ID in your phone's Settings → Google → Ads.
- Google Play In-App Review: shows a Play Store review request on day 3 of the trial.
- Google Play In-App Updates: asks the Play Store app on your phone whether a newer Sellby version exists, to show a "new version available" notice. Sellby sends no data in this check.
- Block Store (Google Play services): keeps a copy of the trial start time outside the app's own data, so the 3-day trial applies once per device and does not restart after a reinstall. Only one timestamp is stored, with no personal data.
- Android Auto Backup (Google Drive): if your phone's backup is on, Android may back up the app's data (store data, QRIS photos, settings, trial/purchase status) to your Google account and restore it on a new phone. This is controlled by your phone's backup settings and Google, not by us.
- Cadangkan & Pulihkan (a file you save yourself): when you use this button on the Dashboard, Sellby writes one backup file (
.sellbybackup) with your store data (invoices, products, customers, orders, QRIS/product/Auto-Text photos, store profile and message templates) to the place you choose in Android's file picker, for example Google Drive. Sellby itself sends nothing over the internet: if you choose Google Drive, the Drive app on your phone uploads it to your Google account. The file is not password-protected and contains customer data, so keep it somewhere safe. Trial status and the Premium purchase are not included. Restoring a file replaces the data on that phone with what is in the file.
6. Data you share yourself
Some features send data out only when you act: sending invoice/status text to WhatsApp, WhatsApp Business, Telegram or Instagram; opening a courier's website or app to check shipping costs; saving an Excel export to a location you choose with the system file picker. After that, the data is governed by the privacy policy of the destination app or service.
7. Deleting your data
- Delete Data (Settings in the keyboard): you tick what to remove: Status, Orders, Products (including product photos), Customers, Message Templates, Payment Methods (including QRIS photos), Auto-Text and Printer data. The store profile is not in that list. The trial marker and purchase status are deliberately kept so the trial cannot be repeated and a purchase is not lost.
- Uninstalling the app removes all app data from the phone. Copies in your Google backup can be removed in your Google account's backup settings.
- Because your store's data is not on our servers, we cannot see or delete it for you; you control it directly on your phone.
8. Children
Sellby Keyboard is meant for sellers aged 16 and over and is not directed at children under 13. We do not knowingly collect data from children.
9. Security
Data is kept in the app's private storage on your phone, protected by the Android system and your screen lock. No storage method is completely risk-free; keep your phone protected with a screen lock.
10. Changes to this policy
If this policy changes (for example when a new feature sends data to a server), we will update this page and its date before the affected app version is released.
11. Contact
Questions or privacy requests: x.employstudio@gmail.com.