Privacy Policy

1. Introduction

Welcome to Kim Mart Supermarket ("Kim Mart," "we," "us," or "our"). We are committed to protecting your privacy and ensuring you understand how your personal information is collected and used.

This Privacy Policy applies to our mobile applications:

• KimMart Rewards - Our customer loyalty rewards application
• KimMart Staff - Our internal staff management application

By using our applications, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access or use our applications.

2. Information We Collect

We collect the following types of information:

2.1 Contact Information

• Name: Your first and last name for account identification and personalization
• Email Address: Used for account authentication, communication, and account recovery

2.2 Identifiers

• User ID: A unique identifier assigned to your account for system operations
• Device ID: Used to deliver push notifications and ensure proper app functionality

2.3 User Content

• Photos or Videos: Images you choose to upload for news posts, promotional content, or profile pictures (Staff app only)
• Customer Support Data: Information you provide when contacting our support team

2.4 Usage Data

• Product Interaction: How you interact with our app features, including app launches, screen views, and feature usage (collected anonymously for analytics)
• Search History: Customer search queries within the app to improve search functionality

2.5 Transaction Data

• Points earned and redeemed
• Reward redemption history
• Purchase transaction records associated with points

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 App Functionality

• To authenticate and secure your account
• To process loyalty points transactions
• To enable reward redemptions
• To deliver push notifications about your account activity
• To provide customer support
• To display your profile information within the app

3.2 Analytics (Anonymous)

• To understand how users interact with our apps
• To improve app performance and user experience
• To identify and fix technical issues

Important: We do not use your information for:

• Third-party advertising
• Tracking across other apps or websites
• Selling to data brokers
• Marketing by third parties

4. Data Sharing & Third Parties

We work with trusted service providers to operate our applications:

4.1 Service Providers

• Supabase: Our backend database provider for secure data storage and authentication
• Firebase Cloud Messaging (FCM): Google's service for delivering push notifications
• Cloudinary: Image hosting and optimization services

4.2 Data Sharing Principles

We do not:

• Sell your personal information to third parties
• Share your data with advertisers
• Provide your information to data brokers
• Use your data for cross-site tracking

We may share your information:

• With service providers necessary for app operation (as listed above)
• When required by law or legal process
• To protect the rights and safety of Kim Mart and our users
• In connection with a merger or acquisition (with notice provided)

5. Data Storage & Security

5.1 Data Storage

Your data is stored securely using industry-standard encryption. Our primary database is hosted on Supabase with the following security measures:

• TLS 1.2+ encryption for all data in transit
• AES-256 encryption for data at rest
• Row-Level Security (RLS) policies ensuring users can only access their own data
• Regular security audits and updates

5.2 Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Transaction history may be retained for legal and accounting purposes.

5.3 Security Measures

• Secure authentication with encrypted passwords
• Two-factor authentication (2FA/MFA) options
• Biometric authentication (Face ID/Touch ID) support
• Session management with automatic timeouts
• Rate limiting to prevent abuse

6. Push Notifications

We use Firebase Cloud Messaging (FCM) to send push notifications. These notifications are used for:

• Transaction confirmations (points earned, rewards redeemed)
• Account security alerts
• Important service announcements
• New rewards and promotions (optional, can be disabled)

Device tokens are collected solely for notification delivery and are linked to your account. You can disable push notifications at any time through your device settings or within the app.

7. Camera & Photo Access

7.1 Camera Access

Our apps request camera access for the following purposes:

• KimMart Staff: Scanning customer QR codes for point transactions and reward redemptions
• KimMart Rewards: Displaying your personal QR code for in-store scanning

7.2 Photo Library Access

Photo library access is requested for:

• KimMart Staff: Selecting images for news posts and promotional content
• Profile Pictures: Uploading a profile photo (optional)

We only access photos you explicitly select. We do not scan or analyze your photo library.

8. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data (subject to legal requirements)
• Data Portability: Receive your data in a portable format
• Opt-Out: Disable push notifications and optional data collection

To exercise these rights, please contact us at support@misskimstore.com.

9. Account Management

9.1 KimMart Rewards (Customer App)

Customer accounts can be created through the app. You may request account deletion by contacting our support team at support@misskimstore.com.

9.2 KimMart Staff (Staff App)

Staff accounts are created and managed by Kim Mart administrators through our admin portal. Staff members cannot self-register. Account deletion and modifications are handled by administrators in accordance with employment policies.

For staff account inquiries, please contact your store manager or the admin team.

10. Children's Privacy

Our applications are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@misskimstore.com and we will delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

For significant changes, we will provide additional notice through the app or via email. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

We aim to respond to all inquiries within 48 hours.