MOO CHU CHU · PERMATA CULINARY
Privacy Policy
MooChuChu Recorder Backup
Last updated: 17 October 2026
MooChuChu Recorder Backup supports the Owner-operated Moo Chu Chu Temporary Sales Recorder. Its only use of Google Drive is to store and recover encrypted Sales Recorder backups in the authorizing Owner's application-private storage.
Limited Google Drive access
When privately authorized and configured by the Owner, the backup client requests only Google's drive.appdata permission (called drive.appfolder by rclone). Access is confined to this application's hidden appDataFolder, with the backup namespace MOOCHUCHU-SYSTEM-BACKUP/SALES-RECORDER. It does not read, search, change or delete ordinary personal My Drive files. Backups are not visible in the normal Drive file browser.
Data included and excluded
Backups contain a consistent sales database, product catalog and price snapshots, sales and historical import records, audit records, referenced private receipt photos, and restore metadata with checksums. Account names, roles, store assignments, salted password hashes and password-change requirements are retained so authorized accounts can be recovered.
Plaintext passwords, login sessions and session tokens, reset tokens, OAuth credentials, encryption keys, unrelated application data and unnecessary temporary files are excluded from uploaded backups. Private authorization configuration is kept separately on the backup host.
Purpose, access and sharing
Data is used only for backup, integrity verification, disaster recovery and Owner-authorized restoration of this Sales Recorder. We do not sell backup data, use it for advertising, or use it to train AI models. Google provides the storage service. Access to operational backup credentials and recovery material is restricted to the Owner and expressly authorized administrators. The backup is not shared publicly or made available to other store operators through a public download link.
Encryption and security
Backup contents and filenames are encrypted on the backup host before upload using rclone crypt with authenticated content encryption. Transfers use HTTPS. Recovery passwords and authorization credentials are protected separately with restricted filesystem permissions; the Owner must retain independent private recovery copies. Authorized restore verification downloads and decrypts backups only into isolated private storage. Google receives encrypted backup content and may process associated service metadata, such as storage usage and request timing.
This public page does not grant access to transactions, private attachments or backups. Sales Recorder data remains protected by login and server-side permissions. OAuth authorization does not make sales data public.
Retention and deletion
The remote backup retention target is 30 days. Cleanup runs after a successful verified backup, affects only recognized backups in this application's private namespace, and retains the newest backup for recovery even if it is older than 30 days. Failures can delay cleanup. App-private storage does not support trash, so expired backups are permanently deleted within that namespace. Existing local backups have a separate retention policy of up to 30 snapshots.
The Owner can revoke the application's Google access through Google Account settings to stop future authorized access. Revocation alone does not guarantee deletion of existing backups. Contact the Owner to request deletion or discuss retention; deletion of the hidden app data or loss of recovery keys can make recovery impossible.
Owner contact
For privacy, access, deletion or recovery questions, contact the Moo Chu Chu Sales Recorder Owner at jerry.yanto1305@gmail.com.
Policy changes
Changes to this limited backup use will be reflected on this page with an updated date. Additional Google permissions require a separate authorization decision.