This Privacy Policy explains what the Fran-Trak POS app collects, why, who it is shared with and the choices you have. The app is published by Fortibus, Inc. ("Fortibus", "we", "us") as Fran-Trak POS (Android package com.fortibus.frantrakpos).
Fran-Trak POS is a point of sale register for businesses. A store that subscribes to Fran-Trak installs it on its own tablets and enrolls each tablet with a one-time code from the Fran-Trak portal. The store's employees sign in on the tablet with a PIN. The app is not meant for consumers to install, and it does not let anyone create an account from the app.
Our website Privacy Policy covers www.fortibus-inc.com. Questions about this policy can go to privacy@fortibus-inc.com at any time.
Who is responsible for the data
The store decides what it records at its register: its menu and prices, its sales, its employees and the details its own customers give it. For that data the store is in charge, and Fortibus processes it on the store's behalf to provide Fran-Trak. Fortibus is responsible for the technical data the app itself collects to run, such as tablet identity and status. If you are an employee or a customer of a store and have a question about how that store uses your information, please ask the store first. We will help the store answer you.
What the app collects and why
| Information | What it includes | Why |
|---|---|---|
| Tablet identity | The name the store gives the tablet, the operating system's identifier for the app install (Android ID, or the iOS vendor identifier), the platform, the app version and build | To enroll the tablet to the store, keep one record per physical tablet and tell the store which tablets are running which version |
| Tablet status | Printer status, the number of sales waiting to sync, the checkout mode in use, the time the tablet last checked in and the IP address of its connection | To show the store which registers are healthy, to deliver menu and tax updates, for support and for security |
| Sales records | Items sold, prices, modifiers, discounts, taxes, tips, how each sale was paid, refunds, voids, cash drawer events, ticket numbers and times | These are the store's own sales records. They power its receipts, reports, day-end totals and accounting |
| Employee information | Employee names and roles, a PIN (stored only as a one-way hash), clock-in and clock-out times, register sessions and which manager approved a refund or price change | To let employees sign in, record their hours for the store's payroll and keep an audit trail of register actions |
| Customer details the store enters | A name for the order and order notes. For online and delivery orders the store receives: the customer's name, phone number, delivery address and instructions | To make and hand over the right order to the right person |
| Age checks | Whether a customer was confirmed to meet an item's minimum age | To help the store follow age rules. If an employee types a date of birth, the app uses it only to work out the age on the tablet; the date of birth itself is not saved or sent |
| Card payment results | Card brand, last four digits, amount, approval status and the processor's transaction reference | To record how a sale was paid and to make refunds and tip adjustments. See "Card payments" below |
| Gift cards | The gift card number and balance for the store's own gift cards | To activate, load, redeem and refund the store's gift cards |
| Store images | A logo or splash image the store picks from the tablet's photo library | To show the store's branding on the register. These images stay on the tablet |
Card payments
Cards are read by a certified card reader from the store's payment processor (Stripe, or the processor the store connects through Datacap). The card number, expiry date, security code and PIN go from the reader to the processor. They are never available to the Fran-Trak POS app and Fortibus never stores them. The processor handles that information under its own privacy policy and its agreement with the store.
Device permissions
- Location. Android requires location permission to search for Bluetooth devices, and the payment processor's card reader software uses the tablet's location when connecting to a reader, as the card networks require for fraud prevention. Fortibus does not collect, store or track the tablet's location.
- Bluetooth, NFC and the local network. Used to find and connect to the store's card readers, receipt and label printers, and barcode scanners. Receipts and labels are sent straight to printers on the store's own network.
- Phone state. This permission is included by the card reader software from the payment processor. The app's own code does not use it, and the app does not read phone numbers or call information.
- Photos. Only when the store chooses a logo or splash image in Settings.
- Camera. Where the camera is used to scan a ticket's barcode, the picture is read on the tablet to find the barcode and is not saved or sent.
- Microphone. The app does not record audio.
What the app does not do
- It shows no ads and contains no advertising or analytics tracking software.
- It does not use the advertising ID, read contacts, or track activity in other apps or websites.
- Fortibus does not sell personal information, and does not share it for cross-context behavioral advertising.
- Fortibus does not use store data to train artificial intelligence models.
How we use the information
We use the information above to run the register and the Fran-Trak service for the store, to sync sales between the store's tablets and its portal, to produce the store's reports, to deliver app updates, to give support, to keep the service secure and prevent fraud, and to meet legal obligations. We may also use information about how the service performs, in a form that does not identify any person, to fix problems and improve it.
Who we share it with
- The store. The business that runs the register can see its own sales, employee and order records in the Fran-Trak portal. Where the store belongs to a franchise system that uses Fran-Trak, the franchisor can see that store's records within the access set up between them.
- Service providers that help us run Fran-Trak, under contracts that limit their use of the data: Amazon Web Services (hosting, in the United States) and Expo (delivers app updates to the tablet, and receives the tablet's IP address, platform and app version when it checks for one).
- Payment processors the store uses, as described in "Card payments".
- Online ordering and delivery partners the store has connected, so their orders reach the register and their status can be reported back.
- For legal reasons: to comply with law or a valid legal request, to enforce our agreements, or to protect the rights, property or safety of Fortibus, our customers or the public.
- In a business transfer: to a buyer of all or part of Fortibus's business, who must protect the information as this policy describes.
Where it is stored and how it is protected
On the tablet, sales are kept in the app's private storage so the register keeps working without an internet connection. A sale is removed from the tablet 14 days after it has synced. The tablet's sign-in credential is kept in the operating system's secure storage. Data sent between the app and our servers is encrypted in transit, and our servers are in the United States. Employee PINs are stored only as one-way hashes. Access to store data by Fortibus staff is limited to what support, security and operations need.
How long we keep it
Sales, employee and order records are kept for as long as the store has a Fran-Trak account, because they are the store's business records. When a store's account ends, the store can export its data for 30 days, after which we delete it or make it anonymous within 90 days. Copies in routine backups expire on their own schedule, and we keep records the law requires for tax, accounting or disputes for as long as it requires them. Removing the app from a tablet deletes the data stored on that tablet.
Your choices and rights
- Stores can view, correct and export their data in the Fran-Trak portal, deactivate a tablet at any time from Manage POS Devices, and ask us to delete their account and its data by writing to privacy@fortibus-inc.com.
- Employees and customers of a store can ask the store to access, correct or delete their information. You can also write to us; we will pass your request to the store and help it respond.
- Depending on where you live, including California and other U.S. states, you may have rights to know what personal information is held about you, to get a copy, to correct it and to have it deleted, and not to be treated differently for using these rights. We answer verified requests within the time the law sets, and you may use an authorized agent.
Children
Fran-Trak POS is a business tool for adults. It is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child's information has been entered, contact us and we will delete it.
Changes to this policy
When we change this policy we will post the new version on this page with a new effective date. If a change is significant, we will also tell store administrators by email or in the Fran-Trak portal before it takes effect.
Contact us
Fortibus, Inc.
Email: privacy@fortibus-inc.com