Privacy policy

Little Treasures (Jewelry Shack Incorporated) runs holiday shops in schools. This policy covers the Little Treasures Cash Register app, which school volunteers use to ring up the shop's sales on iPhones, iPads, Android phones and tablets, Amazon Fire tablets and in a web browser, and this website, where PTA contacts and Little Treasures staff sign in to see what was rung up.

In short: the app records the school's sales, not the people at the register or the children shopping. The only child's name it ever shows is the one printed on a gift certificate a family bought for that child. Nothing is used for advertising, nothing is sold, and the camera only reads barcodes.

• When a register signs in: the school's sign-in code, the name the volunteers give the register (such as "Front table iPad"), the kind and model of device, the app's version, and a random number the app makes up so it's recognised as the same register next time. It doesn't ask for anyone's name, email, phone number or account.
• The sales it rings up: when each sale was made, the price codes and (for items scanned with the camera) the item numbers, quantities, prices, the total, the money handed over and the change, the school's choice of prices, and any sale voided with the reason typed for it.
• Gift certificates taken as payment: the certificate's code (or, for one typed in by hand, its amount and any short note the volunteer types), how much of the sale it paid, and which sale. To check a certificate, the app sends its code through this website to the Little Treasures Gift certificates site, which answers with its amount, whether it can be used, and the student's name and class printed on it, so the volunteer can see it's the right certificate. That name and class are kept with the sale on this website, so the PTA and Little Treasures can match certificates to sales.
• Cash counts: the starting cash and the amount counted in each register's drawer, with any note the volunteer types.
• How many sales it still has to send, so Little Treasures knows every sale is in before the school's return is counted.

The children who shop aren't identified: the app has no place to enter their names or anything else about them. The only exception is the student's name and class printed on a gift certificate, as described above.

The camera is used only while scanning is on, to read the barcodes on items and on gift certificates. It works on the device: no pictures or video are saved or sent. The microphone isn't used. The app doesn't use location, contacts, photos or any advertising identifier, and it has no advertising, analytics or tracking tools in it.

On the device itself, the app keeps what it needs to work without internet: the school's sign-in, prices and sales. Sales are kept until they've been sent, then for a week (for the Today screen). Signing out in Settings removes the school's sign-in; sales not sent yet stay on the device until they can be sent.

• PTA logins: the name and email address of the contact who manages a school's registers, as the school gave them to Little Treasures with its order. We email them a link to choose a password.
• Passwords are stored only in a scrambled form that can't be turned back into the password. Two-factor sign-in settings are kept if it's turned on.
• Signing in: each sign-in keeps the internet address and browser type it came from, until it ends (8 hours at most). A record of what's done on the website (signing in, downloading sales, and so on), with the internet address, is kept for a year to keep accounts safe.
• One cookie keeps you signed in. There are no advertising or tracking cookies.

• To run the school's registers: sign-in, prices, gift certificates, cash counts, and the totals each register and the PTA see.
• To count and bill the school's holiday shop: Little Treasures uses the sales to work out what was sold and what comes back.
• To email PTA contacts their login.
• To keep things secure, such as limiting repeated wrong sign-in codes from one internet address.

We don't sell this information or share it for advertising.

Only the services that run this for us, under their own privacy and security terms: Cloudflare (hosts this website and its database) and Resend (sends the login emails). Gift certificates are checked with Little Treasures's own Gift certificates site, which sold them. Apple, Google and Amazon deliver the app through their stores under their own policies. We may also share information when the law requires it.

• Sales, the gift certificates used on them and cash counts are business records of the school's holiday shop, kept as long as Little Treasures needs them for its accounts.
• Logins are kept until the school or the person asks us to remove them.
• Website records are kept for a year; sign-ins end after 8 hours at most.

To see, correct or remove information about you, or to remove a login, call Little Treasures at 631-957-1515 or email liltreasures@live.com. A register can be signed out at any time in the app's Settings, and the camera can be turned off for the app in the device's settings (prices can still be tapped).

The app and this website are for adult volunteers, PTA contacts and Little Treasures staff, not for children. Students who shop aren't identified. When a gift certificate is used, the student's name and class printed on it (given by the family that bought it on the Gift certificates site) are shown to the volunteer and kept with the sale, only to match the certificate to the sale. To have a student's name removed, call Little Treasures at 631-957-1515 or email liltreasures@live.com.

Everything goes over encrypted connections, and the app and Little Treasures' own systems sign their requests. If this policy changes, the new version is posted here with a new date.

Questions? Call Little Treasures at 631-957-1515, email liltreasures@live.com, or visit littletreasuresusa.com.

Or write to us:

Little Treasures (Jewelry Shack Incorporated)
154 West Hoffman Ave
Lindenhurst, NY 11757