MW Store — Privacy policy

The short version

Your shop's data — orders, customers, products — stays on your own website. MW Store reads and writes it through our connector; it does not copy it onto a server of ours. We hold your sign-in, the key that connects your website, and, if you ask for notifications, a token for your device. There is no analytics or advertising code in the app at all.

What the app sends, and where

• Your sign-in — email and password, over HTTPS, to our identity service (InsForge, hosted in its Asia-Pacific Southeast region). Your password is stored there only as a hash; we never see it.
• Everything you do in the shop — through our proxy at dash.mwds.digital, which checks the request is yours and forwards it to your own website. The proxy holds your site's connector key so the app never has to.
• A website address to Google — the little icon beside each store comes from Google's public favicon service, which is sent the website's address and nothing else. No order, customer or account information goes with it.

That is the complete list of hosts the app talks to. There is no analytics SDK, no attribution SDK, and no advertising SDK — the project has no third-party packages at all.

What stays on your phone

• Your session — the access and refresh tokens, and the sign-in saved so a rotated token renews quietly instead of signing you out. All in the iOS Keychain, marked so they never leave this device, and removed when you sign out.
• A short cache — the lists you last looked at, for twenty minutes, so the app opens with something on screen instead of a spinner. Cleared when you sign out.

Permissions the app asks for

• Face ID or Touch ID, only if you switch on the app lock. iOS answers yes or no; the app never receives anything biometric, and nothing about it leaves your phone.
• Photos, only when you pick an image for a product or a popup. The app reads the one you chose and uploads it to your own website's media library. It does not browse your library, and it asks for nothing until you tap the button.
• Notifications, only if you turn them on. Apple issues a token for your device, which we store so we can tell you about a new order. Switch them off in Settings and we delete it.

The app asks for no location, no camera, no contacts and no microphone.

What we keep

• Your account: name, email, the company you belong to, and which websites you may reach.
• The connector key for each of your websites, so the proxy can talk to them.
• Your device's notification token, while notifications are on.
• Ordinary server logs, which record that a request happened and from where.

We do not keep copies of your orders, customers or products. When you look at an order it is fetched from your website and shown to you; nothing is written down on the way past.

Who else sees it

Nobody, beyond the services that carry it: Apple delivers the notifications, our dashboard runs on Vercel, and the identity service is InsForge. We do not sell data, we do not share it with advertisers, and we do not track you across other apps or websites. MW staff can open your store in the app for support — that is how we help you — and the proxy records that it was staff rather than you.

Children

MW Store is a business tool for shop owners. It is not directed at children and we do not knowingly collect anything from them.

Deleting your account

Accounts are issued by us, so they are closed by us — how to ask, and what happens.

Contact

Email support@mwds.digital with any question about this policy, or to ask for a copy of what we hold about you.