Available in English & বাংলা

PharmiOne Privacy Policy

Developer: Khanoft
App: PharmiOne
Effective date: 9 October 2026
Last updated: 9 October 2026

PharmiOne is a pharmacy management app for pharmacies in Bangladesh. This policy explains what data the app and its cloud service collect, why we collect it, who receives it, how long we keep it, and how you can request its deletion.

1. Who We Are

Khanoft ("we", "us", "our") develops and operates PharmiOne and its cloud service. Data you enter in the app is sent to our servers so that you and the staff you authorize can manage your pharmacy.

Contact: support@khanoft.com WhatsApp: +880 1794 030 757

See Section 12: Contact Us.

2. Data We Collect

2.1. Account and Sign-In Data

  • Email address and password: Used to sign you in. Your password is sent to our server over an encrypted connection to authenticate you. The app does not store your password on your device.
  • Session token: Issued by our server and stored on your device to keep you signed in.
  • Profile data: Your name, mobile number, email address, and role, used to display your profile and apply access permissions.
  • Password changes: Your current and new passwords are sent to our server over an encrypted connection to complete the change.

2.2. Pharmacy Information

  • Pharmacy name and address.
  • Invoice header and footer text.
  • Staff accounts, roles, and permission settings.

2.3. Pharmacy Business Records

Depending on the features you use, you may enter:

  • Products and medicine names.
  • Inventory, stock quantities, batches, and expiry dates.
  • Purchases and supplier details, including names and mobile numbers.
  • Sales and customer details, including mobile numbers and outstanding balances.
  • Expenses and other transactions.
  • Payment records, including amounts, dates, and payment-method descriptions.
  • Reports and dashboard summaries.
  • Subscription details, including plans, status, trial periods, billing dates, and payment history.

These records may include personal data about your customers and suppliers, who may not have PharmiOne accounts. Your pharmacy is responsible for having a lawful basis to collect that data and for providing any notices or obtaining any consents required by applicable law. We process this information to provide the service to your pharmacy.

PharmiOne is not designed to collect patient medical records or prescriptions.

2.4. Notifications

The app fetches in-app notifications from our server. These may include low-stock alerts, medicine-expiry alerts, and subscription or billing reminders.

The app does not use Firebase Cloud Messaging or other push-notification services.

2.5. Camera and Medicine Scanning

The medicine scanner uses your device camera and Google ML Kit Text Recognition with a bundled Latin text-recognition model to read printed text on medicine packaging and suggest a medicine name.

  • Text recognition runs on your device.
  • Camera images are not uploaded to our servers and are not saved as image files by the scanner.
  • Text you choose to use in a product record is stored as ordinary pharmacy business data, as described in Section 2.3.
  • Camera permission is requested when you open the scanner. You can deny permission and continue using the rest of the app.

2.6. Technical and Log Data

Our servers may record technical information needed to operate, maintain, and secure the service. Depending on the server configuration, this may include IP addresses, request timestamps, app versions, device or operating-system information, and error logs.

We use such information for security, troubleshooting, and abuse prevention.

2.7. Data We Do Not Collect

PharmiOne does not collect your precise or approximate location, contacts, SMS messages, call logs, microphone audio, photos or files from your gallery, or advertising ID through its current implementation.

The app contains no advertising SDKs and no third-party analytics or crash-reporting SDKs, based on the current implementation.

3. How We Use Data

We use data to:

  • Authenticate users and maintain their sessions.
  • Provide pharmacy management features, including inventory, purchases, sales, customers, suppliers, expenses, reports, and invoicing.
  • Display profiles, pharmacy information, and in-app notifications.
  • Manage subscriptions and billing.
  • Operate, secure, and troubleshoot the service and prevent fraud or abuse.
  • Respond to support requests and privacy inquiries.
  • Comply with applicable legal obligations.

We do not use your data for advertising or build advertising profiles.

4. How We Share Data

We do not sell personal data.

We may share data in the following circumstances:

  • Within your pharmacy: With users your pharmacy authorizes, according to their roles and permissions.
  • Service providers: With cloud hosting and infrastructure providers that process data on our behalf to operate PharmiOne.
  • Payment providers: With payment gateways and mobile financial service providers that process subscription payments. The payment information we receive depends on the payment method and the information returned by the provider.
  • Legal and safety requirements: When required by law or when reasonably necessary to protect the rights, safety, or security of PharmiOne, its users, or others.

We do not share data with advertising networks or data brokers for advertising purposes.

5. Third-Party Components

5.1. Google ML Kit Text Recognition

Google ML Kit Text Recognition is used for on-device text recognition in the medicine scanner. PharmiOne uses a bundled Latin text-recognition model.

Google may process limited technical or performance information in connection with its services, depending on the applicable implementation and service terms. Camera image content is processed on your device by the scanning feature and is not uploaded to PharmiOne's servers by that feature.

Google Privacy Policy: https://policies.google.com/privacy

5.2. AndroidX CameraX

AndroidX CameraX provides camera functionality for the medicine scanner.

Android developer privacy information: https://developer.android.com/privacy

The app also uses open-source libraries for networking, data serialization, local session storage, navigation, and its user interface. The inclusion of these libraries does not necessarily mean that they independently collect personal data.

Third-party services used by our backend, hosting environment, or payment integrations may also process information as described in this policy.

6. Security

We use technical and organizational measures designed to protect information processed through PharmiOne. These measures include, where implemented:

  • Encryption in transit using HTTPS/TLS.
  • Authentication and role-based access controls.
  • Separation of pharmacy data to restrict access between different pharmacy accounts.
  • Storage of session tokens in the app's private storage.

You should protect your device with a screen lock, keep your credentials confidential, and sign out when using shared devices.

No system is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your information, we will take appropriate action and provide notifications where required by applicable law.

7. Data Retention

7.1. Data on Your Device

The app stores a session token locally to maintain your signed-in session. Signing out clears the token, and uninstalling the app removes its app-specific local data.

Signing out or uninstalling the app does not delete data stored on our servers.

7.2. Data on Our Servers

We retain account information and pharmacy records while your account is active and as needed to provide the service, meet legal and accounting obligations, resolve disputes, and enforce our agreements.

Before publishing, replace the following placeholders with verified retention periods:

  • Account and pharmacy data deletion: [CONFIRM ACTUAL DELETION PERIOD]
  • Backup deletion or overwriting: [CONFIRM ACTUAL BACKUP RETENTION PERIOD]

When you delete your account, we will delete or anonymize information in accordance with our deletion procedures, applicable law, and any legitimate retention obligations. Some information, such as records required for legal or accounting purposes, may need to be retained.

8. Account and Data Deletion

You can request deletion of your account and associated data using one of the following methods, subject to the availability of these features:

  1. In the app: Settings → Account → Delete Account.
  2. On the web: https://pharmione.khanoft.com/delete-account.
  3. By email: Send a request to support@khanoft.com from your registered email address with the subject Delete my PharmiOne account.

Before publishing, verify that the in-app deletion feature and the web deletion page are available and functional.

Only the pharmacy owner can delete the pharmacy account and all associated records, if supported by the implemented account-deletion process. Staff members can ask the owner to remove their staff accounts.

We may ask you to verify that you own or are authorized to manage the account before processing a deletion request.

Please specify whether you want customer, supplier, and other business records deleted as part of your request. We will explain any records that must be retained under applicable law.

You can also edit or delete individual records within the app where those features are available.

9. Your Rights and Choices

Subject to applicable law and the features available in PharmiOne, you can:

  • Access your account and business data through the app.
  • Correct inaccurate information using the app's editing features.
  • Change your password using the supported account functionality.
  • Withdraw camera permission at any time through Android settings.
  • Request deletion of your account and data as described in Section 8.
  • Contact us with privacy questions or complaints.

Some changes, such as changing your registered email address, may require assistance from our support team.

We will respond to privacy requests within a reasonable time and as required by applicable law.

If you are a customer or supplier of a pharmacy that uses PharmiOne, please contact that pharmacy first about your information. We may assist the pharmacy in responding to your request where appropriate.

10. Children's Privacy

PharmiOne is a business application intended for pharmacy owners, managers, and authorized staff. It is not directed at children under 18, and we do not knowingly collect personal data directly from children.

If you believe a child has provided personal data to us inappropriately, please contact us so that we can review the situation and take appropriate action.

11. Data Location and Policy Changes

Our servers are located in Bangladesh. Data may also be processed in other countries by our service providers, depending on the infrastructure used to operate PharmiOne.

We may update this policy when our practices, features, or legal obligations change.

We will publish the revised policy at https://pharmione.khanoft.com/privacy-policy and update the "Last updated" date. For material changes, we will provide notice through the app or by email where appropriate or required by applicable law.

12. Contact Us

Khanoft — Operator of PharmiOne

Contact us if you have questions about this policy, want to exercise your privacy choices, or wish to request deletion of your account or data.