Legal

Checkly — Privacy Policy

Effective date: October 14, 2026

Last updated: October 14, 2026

Checkly ("the App"), provided by MerchBytes ("we", "us", or "our"), lets Shopify merchants show the price of a product when its barcode or SKU is scanned: in Shopify POS, in the App's admin, in the companion app for Android ("Price Checker" on Google Play) and in the web companion at checkly.merchbytes.com ("the Service"). The App looks for the product in your Shopify store first. If Shopify has no match, it looks in your own price list, an Excel file you can upload for products that are not in Shopify. This Privacy Policy explains what information we collect, how we use and share it, how long we keep it and what rights you have when you install or use the App with your Shopify store.

Information the App Collects

We process only the information needed to provide the Service:

  • Store and account information: your store's myshopify domain, your Shopify store ID, your store's email address (the one Shopify uses to contact you), which Shopify provides when you open the App, and when and whether the App is installed. We also read your store name from Shopify at that moment; we do not keep it.
  • Authentication information: the Shopify access token and refresh token with their expiry times, and the session tokens used to connect the App to your store and to verify requests from your Shopify admin and Shopify POS.
  • Settings: whether codes are looked up by barcode or by SKU, what the result shows (picture, stock, product name, variant name), how long a result stays on the screen, whether staff pick from several matches, the colours and scan button text of the companion apps, and, if you set one, the 6-digit PIN that protects the companion settings.
  • Your price list: if you upload one, only the columns you choose: barcode, SKU, product name, size, price and stock. We also keep the file name, the number of products, whether the list has barcodes and SKUs, and when it was uploaded. The file itself never reaches our servers: the App's admin reads it in your browser and sends us only these columns. We do not store pictures from it.
  • Codes that were not found: when a scanned barcode or SKU is found neither in Shopify nor in your price list, we save the code with your store and the time, so that we can look into "Product not found" problems.
  • Companion pairing: a random pairing token and a short code linked to your store, with an expiry date. They are created when you open the Companion App page in the App, and the companion apps use them to connect to your store.
  • Subscription information: the status of your Checkly subscription, which we read from Shopify billing to check access to the Service. Shopify handles the billing.
  • Link to the Android app: when you ask the App to email you the link to the Android app, we use the email address you enter only to send that email and do not save it; like other request details, it may appear in our server request logs.
  • Technical and support information: request and error logs kept by our servers; operational alerts our team receives by email, for example when the App is installed or uninstalled or when a product search in Shopify fails, which contain your store domain, the scanned code and the error details; authentication details, such as a session token that failed our check, where needed to diagnose a failed sign-in; and the information you send us when you contact support or make a privacy request.

We receive this information from Shopify, from what you and your staff enter in the App and in the companion apps, and from your messages to us.

Products from your Shopify store. When a code is scanned, the App asks Shopify for the product variants with that barcode or SKU and reads their product and variant names, price, stock quantity and picture. It sends them to the screen that made the scan and does not keep a copy. Pictures are loaded straight from Shopify's servers. The App only reads your products: it cannot change anything in your Shopify store.

What we do not collect. Checkly collects no personal information about your customers, even when they check prices at a kiosk: no names, email addresses, phone numbers or postal addresses, and it does not read customer records or orders. A scan sends us only the code, your store and a token that shows the request comes from your store: a Shopify session token from Shopify POS or the App's admin, or the pairing token of a companion app. Scans from Shopify POS also include the POS location ID, which the App does not use. Checkly does not add anything to the cart and never receives payment card details. The App adds no scripts, cookies or tracking to your online store, and neither the App nor the companion apps use advertising or analytics trackers.

On the companion devices. The companion app for Android and the web companion keep on the device your store's myshopify domain, the pairing token, and a few local preferences: which camera to use, barcode or SKU search, and how long a result stays on the screen. The web companion keeps them in your browser's local storage for checkly.merchbytes.com. The camera picture is read on the device to find the code; only the code is sent to our servers, and pictures are not saved. The Android app reads the code with Google ML Kit, which works on the device and does not send the camera picture. Like any app that uses ML Kit, it may send Google technical information, such as the device model, Android and app versions and how ML Kit performs, which Google uses to maintain and improve ML Kit. If backup is turned on for an Android device, Android may include this information in the device's backup.

Shopify Permissions

  • read_products: to find product variants by barcode or SKU and read their names, price and picture.
  • read_inventory: to read the stock quantity shown with the price.
  • read_product_listings and read_discounts: the App requests these permissions but does not use them at the moment; it does not read your product listings or discounts.

All of the App's permissions are read-only. The App does not request permission to read orders, customers or staff accounts.

How We Use Information

We use information to:

  • Connect the App to your store and authenticate requests.
  • Find the product for a scanned code, in Shopify first and then in your price list, and show its price in Shopify POS, in the App's admin and in the companion apps.
  • Save your price list, show its status, replace it when you upload a new file and remove it when you ask.
  • Pair companion devices and apply your settings to them.
  • Send the link to the Android app to the email address you enter.
  • Check your Checkly subscription through Shopify billing.
  • Look into "Product not found" and other problems, and respond to support and privacy requests.
  • Keep the App secure and improve it.
  • Meet legal obligations and address disputes or misuse.

Your price list is used only for price lookups in Checkly for your store. We do not sell or rent personal information or your price list, do not share them with third parties for their own purposes, and do not use them for advertising.

If the EU or UK General Data Protection Regulation applies to you, we process your store information to provide the Service you installed (performance of a contract), to keep the App secure and to support you (our legitimate interests), and where the law requires it (legal obligations). For the price list and other store data that you process with the App, we act on your behalf as your service provider (processor).

Sharing Information

We exchange information with Shopify as needed to provide the Service. Shopify's own handling of your data is described in Shopify's Privacy Policy.

Product names, prices and stock, both from Shopify and from your price list, are shown to whoever uses Checkly for your store: your staff in Shopify POS and in the App's admin, and anyone at a paired companion device, for example customers at a price check kiosk.

We use service providers to host and operate the App. Our servers and database run on Amazon Web Services (AWS) in the United States, and the Android app link emails and operational alerts are sent through AWS. Google Firebase Hosting serves the files of the App's admin and of the web companion (pages, scripts and styles); it stores none of your store's data, but like any web host it receives technical request information, such as IP address and browser type, when a page loads. The Android app is distributed through Google Play and reads barcodes with Google ML Kit, as described above. Our team receives operational alerts in an email inbox hosted by Google. If you use the App from outside the United States, your information is transferred to and processed in the United States.

We may disclose information when required by law, to respond to lawful requests or to protect our rights.

Data Retention and Deletion

We keep information while the App is installed on your store and as long as needed to provide the Service. You can ask us to delete your store's data at any time by writing to the address below.

Your price list. A new file replaces the whole list: the previous list is deleted as soon as the new one is saved. "Remove list" in the App deletes your list right away. If an upload stops halfway, the rows already sent are never used for lookups; they are deleted when you start a new upload, remove the list, or when your store's data is deleted.

When you uninstall the App. We mark your store's installation as uninstalled, and the App stops showing prices from your price list. About 48 hours later Shopify sends us a shop data erasure request (shop/redact). If the App is still uninstalled at that time, we permanently delete all of your store's Checkly data: the price list, settings and PIN, the codes that were not found, companion pairings, and the installation record with your store's email address and the access and refresh tokens. This happens about 48 hours after you uninstall, and no later than 30 days after. If you reinstall the App before that request arrives, your data is kept.

Because the App holds no personal information about your customers, customer data requests from Shopify (customers/data_request and customers/redact) find nothing to return or delete.

Server logs, operational alert emails and backups are not part of this deletion; we keep them only as long as needed to operate and secure the App. On a companion device, logging out removes the store domain and the pairing token; the camera, search and timer preferences stay until you uninstall the Android app or clear the web companion's site data in your browser. Once your store's data is deleted, the pairing token on a device no longer works.

Your Rights

Depending on the laws that apply to you, including the GDPR and US state privacy laws, you may have the right to access, correct, update, export or delete personal information we hold about you, to object to or restrict some processing, and to complain to a data protection authority.

To make a request, email us at the address below, name the Shopify store concerned and describe the request. We may need to verify your identity or your authority to act for the store. We respond within the time required by the applicable law.

If you are a customer or staff member of a store that uses Checkly, please contact that store first; we will help the merchant respond.

Security

Requests between Shopify POS, your Shopify admin, the companion apps and our servers use HTTPS. Uploading or removing a price list and saving settings in the App's admin require a Shopify session token for your store, and the companion apps connect with their pairing token. Access to our systems is limited to people who need it to operate the App.

Changes

We may update this Privacy Policy to reflect changes to the App, our practices, or legal or regulatory requirements. We will publish the updated policy on this page and change the "Last updated" date above.

Contact Us

For questions about our privacy practices, privacy requests or complaints, email contact@merchbytes.com or write to:

MerchBytes
8 The Green, STE A
Dover, DE 19901
USA