What we count, and what we don't.

Each download button goes through this site, which notes the download and sends you on to the file. For each download we keep:

• the time, the file, and the Qovah version
• which button you used, and the page it was on
• the website that sent you here, and any campaign tags on the link you followed
• your country, as our host works it out from your connection

To tell one person downloading twice from two people, we also keep a code made from your internet address and browser, mixed with a secret that changes every day and is deleted once the day is over. It matches your other downloads that day, and can't be traced back to you or matched to anything after.

We never keep your internet address. This site sets no cookies. How your visit began is kept in your browser's tab, and goes when you close it.

The first time a computer opens Qovah, and the first time it opens each new version, Qovah sends us one short message: the version, the one before, the kind of computer (macOS, Windows or Linux, and its processor), the update channel, and the computer's time zone.

It's labelled with a random code made for this message alone, so we can count each computer once. It isn't your Qovah Cloud sign-in, and it carries nothing from your business: no sales, products, customers, staff or names.

A newly installed Qovah also tells us, once each, when it reaches a milestone: its setup finished, its first item, its first sale, a receipt printer set up, its first cash-up, sales on seven different days, and signing in to Qovah Cloud. Each message is just which milestone, the day it happened and the same random code: never what was sold, for how much, or to whom.

To stop both, turn off Send anonymous install statistics in Settings › Updates. Qovah works the same either way.

Joining a waitlist keeps your email, what you're waiting for, and your kind of business if you say, to tell you when it's ready. A hardware enquiry keeps what you write in it, so we can get back to you. So does a message from the contact page.

When your business uses Cloud services or the online till, a copy of your business's data is kept there: your items and photos, staff and their PIN checks (never the PINs themselves), sales, orders and settings. We keep it to sync your tills, back them up, run the online till and send your daily summary, and look at it only to give you the service or when you ask us to help.

A business that has ever sold anything — at a till, or online — keeps its records with us once a plan or trial ends, because for a shop that only ever used the online till we hold the only copy of them. A business that signed up and never sold anything is deleted 90 days after its access ends, with a warning a week before.

We also count what happens across all businesses together, to see how Qovah is used and improve it: accounts and businesses made, trial activations, trial endings and conversions to a purchase, each business's first plan, order and sale, which weeks businesses are active, how many tills, branches and staff they have, and orders, payments, refunds and payouts, with how much money moves through Qovah in each currency. These are totals only. We never show them for any one business, and we may share the totals (say, the money that moved through Qovah in a year) with investors or in public. We never share any business's own data.

A new business's free Cloud trial records the owner account it belongs to, so that one owner's second business doesn't start another trial, and when it ends. If you have confirmed your email address we use it to tell you the trial is ending.

Desktop trial activation records your Qovah account, registered computer, first activation time and fixed expiry so that reinstalling or restoring a backup cannot restart the trial. Trial activation alone does not upload your sales or catalog.

Purchased-seat activation and retained update coverage record the computer, licence, covered releases and supporting purchase evidence. The computer keeps signed access evidence in its credential store, outside database backups. Online till staff sessions keep short-lived evidence of the actual signed-in staff member so reports follow their current permissions.

• Ordering from a business's storefront, the customer's name, phone and, for delivery, address go to that business with the order. To stop anyone flooding a shop with orders, we count orders from each internet address for a short while, using a code made from the address and mixed with a secret that changes every day: never the address itself.
• The pay page asks the customer for an email, because Paystack, who process the payment, need one. It's kept with the order, and remembered for that customer's next payment to the same business.
• Card numbers and mobile money PINs go to Paystack and the customer's network, never to Qovah or the business. For a mobile money prompt, and for an account a refund is sent to, we keep only the last four digits.
• Payment records are kept 7 years, even after a plan ends, as the law and disputes may need them.

Paystack, who handle our checkout, tell us what each order cost, in its currency, and any refund, along with your name and email for your licence or plan. We keep the orders to send your licence, run your plan and count our own sales.

A few companies process information for us, only to provide Qovah: Paystack (online payments, plan checkout and billing), Convex (Qovah Cloud's database), Cloudflare (this site, the online till, and product photos), and Resend (our emails).

Single downloads, installs and milestones are kept for 13 months, and so is which weeks each business was active. After that, only the daily totals remain: how many downloads, people, installs and milestones, by country, computer and version, and the totals across businesses.

• Sell what we record, share it beyond the companies above, or use it for advertising.
• Follow you around this site or any other.
• Read anything on a till that isn't signed in to Qovah Cloud: those sales stay on that computer.

To ask what we hold about you, or to have it corrected or deleted, send us a message from the contact page. The terms cover the rest.